last executing test programs: 4m11.706593339s ago: executing program 2 (id=3): r0 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000300)={[{@commit}]}, 0x7, 0x4f7, &(0x7f0000000740)="$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") syz_open_procfs(0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000011c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000006040)='./file0\x00', &(0x7f0000006080), 0x80, &(0x7f00000060c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000008180)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f000000a200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a2c0)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f000000a300)="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", 0x2000, &(0x7f000000c300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000c3c0)={0x1f0, 0x0, 0x3, [{{0x4, 0x3, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x7, 0x9, 0x3, 0x6, 0x7, 0x2, 0x2, 0x6, 0x7, 0x8000, 0x0, r3, r4, 0x1, 0x1}}, {0x0, 0x7, 0x1, 0x300, '\x00'}}, {{0x4, 0x3, 0x7fffffff, 0x3, 0x9, 0x10001, {0x6, 0x9, 0x4, 0x46a1, 0x6, 0x0, 0x6, 0x1, 0xa, 0xa000, 0xde, 0x0, r4, 0x8001, 0x80000000}}, {0x1, 0x1, 0x1, 0x32540194, '\x00'}}, {{0x4, 0x0, 0xbe, 0x102, 0x8000, 0x7, {0x6, 0x885, 0x633, 0x77, 0x7fffffffffffffff, 0x2, 0xfffffff7, 0xfffffffa, 0x80000000, 0x1000, 0x1, r3, r4, 0x3, 0x7}}, {0x3, 0x400000, 0x8, 0x7, 'group_id'}}]}, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f000000c5c0)='./file1\x00', &(0x7f000000c600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) read$FUSE(r0, &(0x7f000000c680)={0x2020, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f000000e6c0)='./file2\x00', &(0x7f000000e700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000eac0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f000000eb00)={0x0, 0x0}, &(0x7f000000eb40)=0xc) sendmmsg$unix(r8, &(0x7f000000eb80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f000000ebc0)=[@cred={{0x1c, 0x1, 0x2, {r9, r10}}}], 0x20, 0x40044}}], 0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000ec00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f000000ec40)={0x0, 0x0, 0x0}, &(0x7f000000ec80)=0xc) sendmmsg$unix(r11, &(0x7f000000ecc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}, {{&(0x7f000000ed40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, &(0x7f000000edc0)=[@cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}], 0x20, 0x40000}}], 0x2, 0x0) r16 = getegid() syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001380)="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", 0x2000, &(0x7f000000f040)={&(0x7f0000003380)={0x50, 0xfffffffffffffff5, 0x10001, {0x7, 0x2d, 0x6, 0x10010000, 0x1, 0x820, 0x8000, 0x56, 0x0, 0x0, 0x1, 0x4}}, &(0x7f0000003400)={0x18, 0xfffffffffffffff5, 0x10, {0x2}}, &(0x7f0000003440)={0x18, 0x0, 0xa, {0x81}}, &(0x7f0000003480)={0x18, 0x0, 0x9, {0x303}}, &(0x7f00000034c0)={0x18, 0xfffffffffffffffe, 0x8000000000000001, {0x56baa6b6}}, &(0x7f0000003540)={0x28, 0xb, 0x4, {{0x1, 0x5, 0x2}}}, &(0x7f0000003580)={0x60, 0x0, 0x3, {{0x9, 0xfffffffffffffffb, 0x3, 0x80, 0x2, 0x95, 0x7f, 0x1}}}, &(0x7f0000003600)={0x18, 0x0, 0x9, {0x9af}}, &(0x7f0000003640)={0x11, 0x0, 0x1, {'\x00'}}, &(0x7f0000003680)={0x20, 0x0, 0x4, {0x0, 0x16}}, &(0x7f0000003840)={0x78, 0x0, 0x6, {0x81, 0x3, 0x0, {0x5, 0x1, 0x3, 0x100000000, 0x80000000, 0xffff, 0x4, 0x1000, 0x4, 0x9000, 0xfffff17b, 0x0, 0x0, 0x5, 0x9}}}, &(0x7f0000003a40)={0x90, 0xfffffffffffffff5, 0x575, {0x4, 0x0, 0xffffffff, 0x3, 0xb, 0x9, {0x4, 0x8, 0x8, 0xb, 0x58, 0x10000, 0x3, 0x8, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x7, 0x81}}}, &(0x7f0000003b00)={0xa8, 0x0, 0x7, [{0x1, 0x239f, 0x5, 0x6, 'ext4\x00'}, {0x4, 0x100, 0x8, 0x10001, 'lowerdir'}, {0x6, 0x5, 0x1, 0x3, '.'}, {0x4, 0x40, 0x1, 0xe, '%'}, {0x1, 0x0, 0x0, 0x9}]}, &(0x7f000000e780)={0x330, 0x0, 0x18a400000, [{{0x3, 0x3, 0x8001, 0x0, 0x9, 0x401, {0x0, 0x5, 0x3, 0x7, 0x4c54, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x7, 0x0, 0x0, 0xc82c57b6, 0xfffffffb}}, {0x2, 0x3, 0x8, 0x8, 'overlay\x00'}}, {{0x6, 0x0, 0xa00000, 0x2, 0x5, 0x213d, {0x3, 0x3020, 0x3, 0x80, 0x8, 0x8, 0x40, 0x9, 0x3, 0x8000, 0x8, 0x0, 0x0, 0x7, 0xfc32}}, {0x0, 0x2, 0x5, 0x1, 'ext4\x00'}}, {{0x3, 0x2, 0x6, 0x8, 0x6, 0x80000001, {0x5, 0x9, 0x81, 0x6, 0xfffffffffffffffd, 0x8000000000000001, 0x2133, 0x0, 0x3, 0xa000, 0x2, 0x0, 0x0, 0x7, 0xe}}, {0x1, 0x4, 0x6, 0xfb, 'commit'}}, {{0x3, 0x3, 0x1, 0x6, 0x4, 0x6, {0x2, 0x6, 0x6, 0x8001, 0x6950, 0xe, 0x0, 0x19, 0xa, 0x8000, 0xa, r3, r5, 0x77, 0x2}}, {0x1, 0x4, 0x2, 0xa85, '.$'}}, {{0x5, 0x1, 0x4, 0x1, 0x4, 0xcdd7, {0x0, 0x2, 0x7fff, 0xf76d, 0x8ffb, 0x8, 0xf, 0x568aa390, 0x9, 0xc000, 0x7, r6, r7, 0x3, 0xffff}}, {0x0, 0x1d, 0x8, 0x8, 'upperdir'}}]}, &(0x7f000000ee00)={0xa0, 0xfffffffffffffff5, 0x0, {{0x5, 0x0, 0x900, 0x2, 0x1200000, 0x0, {0x6, 0xffffffff, 0x7c201fe8, 0xffffffffffffff27, 0x6, 0x6, 0xd6bf, 0x40, 0x7, 0x4000, 0x4, r10, r15, 0x1, 0xb02}}, {0x0, 0x8}}}, &(0x7f000000eec0)={0x20, 0x0, 0xfffffffffffffff8, {0x5, 0x0, 0x80000001, 0xa}}, &(0x7f000000ef00)={0x130, 0x0, 0x100000000, {0xa3, 0x7, 0x0, '\x00', {0x200, 0x0, 0xffffffff80000001, 0x6, 0x0, r16, 0x1000, '\x00', 0x7, 0x6, 0x7, 0x3, {0x0, 0x9}, {0xfe1, 0x4}, {0x8, 0x7f}, {0x8, 0x6}, 0xe8, 0x665, 0x2, 0x7}}}}) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./proc\x00', 0x180) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x3, &(0x7f00000001c0)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0x85, 0x0, 0x0, 0x0, 0x3e}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@map, r17, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) mount$overlay(0x0, &(0x7f0000001240)='./bus\x00', &(0x7f0000001280), 0x8, &(0x7f00000012c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]}) chdir(&(0x7f0000001300)='./bus\x00') r18 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x14000, 0x0) openat(r18, &(0x7f0000001340)='./file1\x00', 0x4c142, 0x25) 4m11.135980237s ago: executing program 2 (id=12): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) rmdir(&(0x7f00000001c0)='./file0\x00') sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd22, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffd, 0x3, 0xffff0099, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c2}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000340)="d7faf398bd72a4f61ce84ee2ae9d", 0xe, 0x20040014, &(0x7f0000000380)={0x11, 0x7, r2, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x14) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e24, @local}, 0x10) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) get_robust_list(r4, 0x0, &(0x7f0000000500)) sendmmsg$unix(r6, &(0x7f0000000540), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000580)=0x2) recvmmsg(r5, &(0x7f00000005c0), 0x10106, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000640)={0x0, 0x500, &(0x7f0000000680)={&(0x7f00000006c0)={0x28, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0) 4m11.033025557s ago: executing program 2 (id=13): r0 = syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000b00), 0xfe, 0x59c, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000011c0)='./file1\x00', 0x101842, 0x15) pwrite64(r1, &(0x7f0000001200)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r0, &(0x7f0000001240)=[{&(0x7f0000001280)=""/254, 0xfe}, {0x0}], 0x2, 0x8f, 0x5) ftruncate(r1, 0x3) 4m9.855490718s ago: executing program 32 (id=13): r0 = syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000b00), 0xfe, 0x59c, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000011c0)='./file1\x00', 0x101842, 0x15) pwrite64(r1, &(0x7f0000001200)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r0, &(0x7f0000001240)=[{&(0x7f0000001280)=""/254, 0xfe}, {0x0}], 0x2, 0x8f, 0x5) ftruncate(r1, 0x3) 3m1.457083623s ago: executing program 3 (id=204): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000c00)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000c40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000cc0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000d40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000d80), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f00000000c0)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x6, 0x400, @empty, 0x7f}, 0x1c) io_setup(0x6, &(0x7f0000000180)=0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000001c0)={0x33}, 0x8) io_submit(r4, 0x1, &(0x7f0000000200)=[&(0x7f0000000280)={0x180a, 0x3000, 0x3, 0x1, 0x80, r3, 0x0, 0x30}]) socket(0x10, 0x80002, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) 3m0.50092899s ago: executing program 3 (id=209): syz_read_part_table(0x602, &(0x7f0000000640)="$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") r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000200)={0x5, 0xd, &(0x7f00000001c0)="0aa00d1851ee85aa33587af751"}) r1 = getpid() syz_pidfd_open(r1, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000040)='.\x00', 0x200dcba, &(0x7f0000000080)=ANY=[], 0x0, 0x0, &(0x7f0000000180)) prlimit64(r1, 0xa, 0x0, 0x0) mount(&(0x7f0000000580)=@filename='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='vfat\x00', 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) 3m0.398080371s ago: executing program 3 (id=212): r0 = open(&(0x7f0000000400)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) ioctl$BTRFS_IOC_DEFRAG(r0, 0x401070cd, 0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x3, 0x8, 0x401, 0x0, 0x0, {0x7633f0642283fe94, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048090}, 0x24040001) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r3, @empty, @remote}, 0xc) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000006c0)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xc, &(0x7f00000007c0)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r6}, &(0x7f0000000880), &(0x7f00000008c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r9, r8, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000940)={@random="222bad812151", @remote, @void, {@canfd={0xd, {{0x2, 0x1, 0x1, 0x1}, 0x17, 0x0, 0x0, 0x0, "3e350049702f223f2c62ea51c1345878ca1d98fbfbd087fe2475f47b0bb2109f75e59ade40e66f5ec74818488689d1750729aaab80528d36521bc90b8d4514ff"}}}}, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r10, 0x4008ae9c, &(0x7f0000000040)={0x1f, 0x5, 0x2}) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x293, 0x0, 0x404}]}) r11 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r13}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r14, &(0x7f00000003c0)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r13, @ANYRESHEX=r14], 0x15) pwritev(r11, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000100)="6abed3c581c6", 0x6}], 0x2, 0xfffffffe, 0x1fd) 3m0.320776099s ago: executing program 3 (id=213): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x21048a, &(0x7f00000001c0), 0x1, 0x51a, &(0x7f0000000700)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000e80)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000f40)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/17, 0x11}, 0xce6}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000001000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000001040)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000000c0)='./bus\x00', 0x1200410, &(0x7f0000000080), 0x4, 0x4f7, &(0x7f0000001380)="$eJzs3c9vVFsdAPDvnXZoX9/wylMWalQQUTSE6Q+gIbgQNhpDiEbiygXUdmiazjBNp0VaWZSlexNJXOmf4M6FCSsX7tzpzg0uTFCJhpq4GHPvXNqhnaFV2s5j5vNJbu895wz9ntPhnHPvgekJYGCdjYjNiDgREfciYjzPT/IjbrSO9HWvXj6e23r5eC6JZvPO35OsPM2Ltj+T+jD/nqMR8f1vR/wo2Ru3sb6xNFutVlby9MRqbXmisb5xabGQ50zPTM1MXrt8dfrQ2nqm9usX31q89YPf/uYLz/+w+fWfpNUq/fRkVtbejsPUanoxSm15wxFx6yiC9chw/veH90/a2z4VEeey/j8eQ9m7CQD0s2ZzPJrj7WkAoN+lz/+lSArlfC2gFIVCudxawzsdY4VqvbF6cby+9mA+sjWsU1Es3F+sVibztcJTUUzS9FR2vZMu7EpfjoiPI+JnIx9k6fJcfXO+lzc+ADDAPtw1//9rpDX/AwB9brTXFQAAjp35HwAGj/kfAAbP/zD/+3QgAPQJz/8AMHg6zv9uCgCgr42+NRkRT46vLgDAkfve7dvp0dzKf//1/MP1tW+UHl6arzSWyrW1ufJcfWW5vFCvL1Qr5blmc7/vV63Xl6eubCcb6xt3a/W1B6t3F2uzC5W7leIRtwcA2N/HZ579KYmIzesfZEe07eVgrob+Vuh1BYCeGep1BYCe8XkeGFwHeMa3DAB9rsMWvW/o+r+Bn9r8Fd5XFz5r/R8GlfV/GFz/3/r/Nw+9HsDxs/4Pg6vZTOz5DwADxho/8E7//g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqpQdSaGc7QW+mX4tlMsRJyPiVBST+4vVymREfBQRfxwpjqTpqV5XGgB4R4W/Jvn+XxfGz5d2l55I/j2SnSPix7+48/NHs6urK1Np/j+281ef5vnTJ3rRAACg3Y29Wa15Oj+3Pci/evl47vVxnFV8cbO1uWgadys/WiXDMZydR6MYEWP/TPJ0S3q/MnQI8TefRMRndtr/qC1CKVsDae18ujt+GvvkEcTf+fnvjl94I34hK0vPxexn8elDqAsMmmc3W+Nk3vfSLpb3v0Kczc6d+/9oNkK9u9fj39ae8a+wPf4N7YmfZH3+7Hb67TV5ceV339mT2RxvlT2J+Nxwp/jJdvyky/h7/oBt/PPnv3iuW1nzlxEXonP8llo2zE6s1pYnGusblxZrswuVhcqD6emZqZnJa5evTk9ka9Str7/vFONv1y9+FCOd46ftH+sSf3Sf9n/lgO3/1X/u/fBLXcrS+F/7cuf3//Rb4qdz4lcPGH927EbX7bvT+PNd2r/f+3/xgPGf/2Vj/oAvBQCOQWN9Y2m2Wq2s7HOR3mvu9xoXh3bx3aGIYwsamxG9b7KLT9ZFr0cm4KjtdPpe1wQAAAAAAAAAAAAAAOimsb6xNHLEHzXrdRsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoX/8NAAD//8nzzY4=") socket(0x5, 0x4, 0x101) chown(&(0x7f0000000c40)='./file0\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001080), 0x1e1c0, 0x0) write$FUSE_OPEN(r1, &(0x7f00000010c0)={0x20, 0x0, 0x0, {0x0, 0x4}}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001240)={'dummy0\x00', &(0x7f0000001280)=@ethtool_drvinfo}) syz_emit_ethernet(0x9a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001140)='./proc\x00', &(0x7f0000001180)='proc\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000011c0)='./proc/sys/kernel/watchdog_thresh\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000001200)=0x953c, 0x12) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r6, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x19, 0x3, &(0x7f0000000d40)=ANY=[@ANYRES64=r0], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000dc0)={r6, r7, 0x15, 0x0, @void}, 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x14, 0x0, &(0x7f0000000e00)) syz_mount_image$exfat(0x0, &(0x7f0000000e40)='./bus\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000e80)) 3m0.183592053s ago: executing program 3 (id=214): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x24044821}, 0x0) 3m0.081398023s ago: executing program 3 (id=215): r0 = io_uring_setup(0x667, &(0x7f0000000380)={0x0, 0xa14a, 0x10, 0x2, 0x235}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x101}, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000840)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000980)=@req={0x3fc}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, &(0x7f0000000100)={'filter\x00', 0x0, 0x0, 0x0, [0x6, 0xd5, 0x7ff, 0x1000, 0x3, 0x84]}, &(0x7f0000000180)=0x78) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)={0x2c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x1, 0x0, 0x0, @binary='1'}]}]}, 0x2c}], 0x1}, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r1, &(0x7f00000009c0), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m0.079566513s ago: executing program 33 (id=215): r0 = io_uring_setup(0x667, &(0x7f0000000380)={0x0, 0xa14a, 0x10, 0x2, 0x235}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x101}, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000840)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000980)=@req={0x3fc}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, &(0x7f0000000100)={'filter\x00', 0x0, 0x0, 0x0, [0x6, 0xd5, 0x7ff, 0x1000, 0x3, 0x84]}, &(0x7f0000000180)=0x78) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)={0x2c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x1, 0x0, 0x0, @binary='1'}]}]}, 0x2c}], 0x1}, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r1, &(0x7f00000009c0), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m58.432410382s ago: executing program 0 (id=230): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x79}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x3, 0xc240) close_range(r1, r2, 0x2) userfaultfd(0x801) setsockopt(0xffffffffffffffff, 0x80, 0x7d, &(0x7f0000000240)="02", 0x1) r3 = syz_open_dev$rtc(&(0x7f0000000380), 0x0, 0x103300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r5, 0x0, r7, 0x0, 0x38f9, 0x0) fcntl$setstatus(r7, 0x4, 0x2000) splice(r6, 0x0, r5, 0x0, 0x10000, 0x0) write(r4, &(0x7f0000000440)='w', 0x1) ioctl$XFS_IOC_SWAPEXT(r3, 0xc0c0586d, &(0x7f0000000480)={0x0, r3, r3, 0xc3, 0xa9d, '\x00', {0xb, 0x9, 0xfff0, 0x5, 0x6, 0x8d, 0x0, 0x5, {0xe67, 0x8dbf}, {0x6, 0x9}, {0x7, 0xff}, 0x4, 0x9, 0x8, 0x100, 0x8, 0x0, 0x99d, 0x400, 0x2000, 0x9, '\x00', 0x5, 0x7, 0x5, 0x2}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x6080, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, 0x0) timer_create(0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) link(0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r8, 0x0, 0x81, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {r9, r10+60000000}}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa2140, 0x1c1) 2m57.56929905s ago: executing program 0 (id=241): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x200010, &(0x7f0000005700)={[{@discard_unit_block}, {@nobarrier, 0x0}, {@nolazytime}, {@reserve_root={'reserver_root', 0x3d, 0x100}}, {@prjquota={'prjquota', 0x3d, 'user_xattr'}}, {@disable_ext_identify}, {@grpjquota={'grpjquota', 0x3d, 'background_gc=on'}}, {@fsync_mode_strict}, {@fsync_mode_posix}, {@six_active_logs}, {@whint_mode_off}, {@user_xattr}, {@prjjquota={'prjjquota', 0x3d, '@-@$'}}, {@discard}]}, 0x1, 0x5547, &(0x7f0000000180)="$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") 2m57.162026002s ago: executing program 0 (id=244): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xca, 0x0, 0x1000}}}}}}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x301202, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@getnexthop={0x20, 0x6a, 0x501, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = accept4(0xffffffffffffffff, &(0x7f0000000400)=@l2tp={0x2, 0x0, @remote}, &(0x7f0000000480)=0x80, 0x800) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0x5) setreuid(r7, 0x0) setresuid(0x0, 0x0, r7) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@local, @in=@empty, 0x4e24, 0x4, 0x4e20, 0x5, 0x2, 0x0, 0x80, 0x2e, r3, r7}, {0x3ff, 0x7, 0x7, 0x7, 0xc, 0x9, 0x2, 0x3}, {0x0, 0x0, 0x0, 0x7}, 0x401, 0x6e6bbf, 0x1, 0x0, 0x1, 0x1}, {{@in=@loopback, 0x4d5, 0xff}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x24}, 0x3505, 0x5, 0x2, 0x0, 0x2, 0xd32, 0x81}}, 0xe8) 2m57.065303202s ago: executing program 0 (id=247): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="2c0000001a", 0x5) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000880)={0x32c, 0x12, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x2, 0xc, 0x1, {0x4e23, 0x4e22, [0x1dd, 0x3, 0xffffffff, 0xffffffff], [0x8, 0x7, 0x5, 0x101], 0x0, [0x401, 0x8]}, 0x7fff, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x25, 0x1, "daa516739e470f1c96ec62a2b1ab488f0d48ea84160ea451880859f45886f7f885"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "771d7688fe1fbbdc04a484f4c4085d1dfe2653d0947ef4fef88e741fe24797bceed8c81353d3d004c9eb207ed6831073435371ec0349d3ce7035d4f2687d176edcbcd00ec0912c269942df14eacaec8897dcfb3d36e2cf47b87c0ae5d2c44f3c5b0b17d79c783c6cf18de509f83b9820ae0a17081cbd2f34f65d53c28e8224b4ef9bd65f0945d6edefe89b030e"}, @INET_DIAG_REQ_BYTECODE={0x69, 0x1, "cc438cb944e3c00bccb7bc57238af408d28d941f95ebd041a478c31eb88ae688dcfa078b6165bc7f7154f95343f201c9f52578ee8338fe4d88f46fe4287ffe25afc639fbe51458f2e11e0260f05be054bf1c38027977451ed85a94326e9ffc9e78438402ef"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "aef303390e61f7e7ee3fb4374e62961a4338bcfe7c103fff2e6cb94fc5f6d19663817921aafb2bce23f07823f4a0b3520b4e412b37b9c8e8f8a38fd8a0c5ab1715224a01f9cc312ed0"}, @INET_DIAG_REQ_BYTECODE={0x35, 0x1, "a84169921566ac06c902af3c3d893a5a85e4f06162a23a4b36a353718054b793b978a21c54952fd301617f5d1ebd7316a6"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "2b1f9b15364e20e77d6e2a65ccb3ecfc626a0044d37de1c728641c7122dcb6256ff150066c135120ad74ac5e455f75536c0363ac96f7104ff037c1ad181babacf755e7455e4830aaa129a0b4a7aa15ed2149093f7ed385302616adb3bd1427d1a68a4df68652d4"}, @INET_DIAG_REQ_BYTECODE={0xc1, 0x1, "2f86fba2101775eaed143c85ea9c8f16833edffca236e3d5df3750ea577eee944b3b5f55e0c4ae74e43775db6d16cdb3b2e42c27b59c02e2f9e569037e04b203f2202e7fd617f157346e1432f7781f5ee89eeab1ba5446a5f889badb4db52430bd6fea93ef48df5efc69a6688bb858a44cbc50a52611e889b6a360392b68eee841e876bea02a57f274118ec0519df591742588b8cfba05bec230ef7ed6de5c2779694593f86ddd47462663309743adfd47dbe78b2c941cbf162933a7c1"}]}, 0x32c}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000840) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x40000) 2m57.062606802s ago: executing program 0 (id=248): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./mysys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711007000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) setuid(0xee00) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000400000006000000001000007e6d8f3cbc9e850c8c1c83ee736b477d8735247b0db953354e271e25c2e053b4f439422086e8112b55f268d8c9c93d8f33bc5449568311bb9bacdaaf5a031ac2df4f0d551e15c1e178a2a7932dc1329e60406979cd4fcb4238c6163e0a588fd619283631ae41fb2828a0a30dc68c3ee77eb0851bcd120b50c3b15ac9213b801bba4fef2326ab1a899a1f3214f46b0a9cb3691b1fe61b97efada2e4d4a8d4797cc2e2deedcc4f61ffd8860200000000f4fe99856986de7506fbd404dc58e70f03558a8d60c263cb577472", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x11, &(0x7f00000005c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000740)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000780)=0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000000200)={0x158104100, 0x0, 0x0, 0x0, {0xd}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m57.020229037s ago: executing program 0 (id=249): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691fa9957fff2fb2f411b1c3dba471d1e4132f09405a5b81867a01cf3df73c16a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b08fc19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a5c620000000000000000"], 0xf, 0x2b1, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x70) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000200)='./file0/file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r0 = open(&(0x7f0000000d00)='./file1\x00', 0x4000, 0x32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) read$FUSE(r0, &(0x7f0000001000)={0x2020}, 0xfffffe06) 2m41.868493956s ago: executing program 34 (id=249): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691fa9957fff2fb2f411b1c3dba471d1e4132f09405a5b81867a01cf3df73c16a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b08fc19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a5c620000000000000000"], 0xf, 0x2b1, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x70) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000200)='./file0/file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r0 = open(&(0x7f0000000d00)='./file1\x00', 0x4000, 0x32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) read$FUSE(r0, &(0x7f0000001000)={0x2020}, 0xfffffe06) 2.573876797s ago: executing program 6 (id=1703): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x1a) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f0000000f40)={&(0x7f0000000940)=@isdn, 0x80, &(0x7f0000000e80)=[{&(0x7f00000009c0)=""/64, 0x40}, {&(0x7f0000000a00)=""/206, 0xce}, {&(0x7f0000000b00)=""/113, 0x71}, {&(0x7f0000000b80)=""/199, 0xc7}, {&(0x7f0000000c80)=""/59, 0x3b}, {&(0x7f0000000cc0)=""/135, 0x87}, {&(0x7f0000000d80)=""/228, 0xe4}], 0x7, &(0x7f0000000f00)}, 0x40002162) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000003c0)=[@timestamp, @mss={0x2, 0x7}, @timestamp, @sack_perm, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @window={0x3, 0x6, 0x7}, @mss], 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x8, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_init1(0x80000) copy_file_range(r2, 0xfffffffffffffffe, r2, 0x0, 0xc, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x1000840, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x2, 0x5535, &(0x7f0000001400)="$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") r3 = open(&(0x7f0000006940)='./bus\x00', 0x1c1242, 0x12a) lseek(r3, 0x3, 0x3) sendto$inet(r0, &(0x7f0000000280)="4dad", 0x2, 0x20000000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000002c0), 0x4) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r4 = socket(0xa, 0x3, 0xff) sendmmsg$inet6(r4, &(0x7f0000000300)=[{{&(0x7f0000000900)={0xa, 0x4e23, 0x4cf2ed4, @mcast2, 0x4}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000000000)="4eb57bf9173afa05fbf6b59102e1a9c924b09f9bbb000015f8a39e4d2dc59cdbe02baff17c328e77", 0x28}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e22, 0x7f, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000029000200370000006c00000000000000"], 0x18}}], 0x2, 0x40840) timer_gettime(0x0, &(0x7f0000000080)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./debug/lru_gen\x00', 0x1, 0x0) write$tcp_mem(r5, &(0x7f0000000440)={0x2000000000000006, 0x20, 0x0, 0x20, 0x10001}, 0x48) syz_usb_connect$hid(0x3, 0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000080004008ac050a034000010203010902240041"], 0x0) connect$inet(r5, &(0x7f00000004c0)={0x2, 0x4e22, @multicast2}, 0x10) 2.073495718s ago: executing program 5 (id=1708): unshare(0x64000600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000700)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1c02, 0x0) poll(&(0x7f0000000040)=[{r1, 0x2040}], 0x1, 0x1) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000740)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000364000/0x1000)=nil, 0x400000, 0x2, 0x2}) 2.065110689s ago: executing program 5 (id=1709): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000280), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000002c0), 0x80002c1, 0x2, 0x0) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000002a40)={0x6, 0x0, [{0x10000, 0x3b, &(0x7f0000002b40)=""/59}, {0x3000, 0xec, &(0x7f0000002b80)=""/236}, {0x2, 0xe, &(0x7f0000002c80)=""/14}, {0x0, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) tkill(r2, 0x13) socket(0x11, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001680)=[{&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000280)=""/93, 0x5d}, {&(0x7f0000000440)=""/15, 0xf}, {&(0x7f0000000480)=""/186, 0xba}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/70, 0x46}, {&(0x7f00000015c0)=""/168, 0xa8}], 0x7, &(0x7f00000029c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/156, 0x9c}, {&(0x7f00000027c0)=""/222, 0xde}, {&(0x7f00000028c0)=""/145, 0x91}, {&(0x7f0000002980)=""/2, 0x2}], 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x180) mount$overlay(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0), 0x8, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]}) 1.524993604s ago: executing program 7 (id=1716): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0xfffffffffffffdf1, &(0x7f0000000380)={&(0x7f0000000400)=@deltfilter={0x34, 0x2d, 0x5, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0x3, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) 1.517631205s ago: executing program 6 (id=1717): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='ns\x00') r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000003c0)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r1, &(0x7f0000000400)="240000001a005f0214f9f407000982001f000000fe0000000000000008000f00fd000000", 0x24) getdents64(r0, &(0x7f0000000300)=""/141, 0x8d) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x37a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3e, "", [{{0x9, 0x4, 0x0, 0x0, 0xf7, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfff, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0xe, 0x8}}}}}]}}]}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5, 0x4c3, 0x1000, {r4, r5/1000+60000}, {}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x0, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x408c1) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x20, 0x20, 0x31, {0x31, 0x8, "83efb930f01891f0478fa20961a54207b703a9e43d359c479c37f525cde38bf791408a366948aba64a9dbc6d3dfb8e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_read(r2, 0x3, 0x55, &(0x7f00000000c0)=""/85) 1.497004637s ago: executing program 7 (id=1719): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x7}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendfile(r1, r2, &(0x7f0000000000)=0x3, 0x9) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000006c0)={0x0, 0x0, 0x0, &(0x7f0000000700)=""/115, 0x0, 0x80a0000}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, 0x0, &(0x7f00000007c0)=""/100, 0x0, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000840)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000008c0)=0x20000) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4028af11, &(0x7f0000000900)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f00000010c0)='./file0\x00', 0x0, &(0x7f0000001100)={[{@i_version}, {@noblock_validity}, {@noquota}, {@nouid32}, {@norecovery}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x80}}, {@noauto_da_alloc}, {@resuid, 0x32}]}, 0x1, 0x527, &(0x7f00000011c0)="$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") 1.425355024s ago: executing program 7 (id=1720): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000004c0)="$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") ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x72}}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pipe(&(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = gettid() r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000b00), 0x40c82, 0x0) r2 = epoll_create(0x2000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000b40)={0xa0000019}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ppoll(&(0x7f0000000b80)=[{r2, 0xf082}], 0x1, &(0x7f0000000bc0)={0x0, 0x3938700}, 0x0, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000180)='timers\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x183400, 0x0) pselect6(0x40, &(0x7f0000000280)={0x3, 0x5, 0x9, 0x80, 0x7, 0x77, 0x100, 0x6}, &(0x7f00000002c0)={0x8, 0x6, 0x0, 0x7, 0x80, 0xea7, 0x2, 0xffffffffffff0000}, 0x0, 0x0, 0x0) fstat(r3, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000c00)='./file0\x00', 0x1810714, &(0x7f0000000c40)={[{@nodiscard}, {@init_itable_val}, {@auto_da_alloc}, {@jqfmt_vfsv1}, {@jqfmt_vfsold}, {@noblock_validity}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@bh}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}]}, 0xdf, 0x475, &(0x7f0000000d40)="$eJzs289vFFUcAPDvTLeAgGxFREGQKpo0/mhpQeVgYjSaeNDERA94rG0hyEINrYmQRqsxeDQk3o1HE/8CT56MejLxikcTQ0KUmIheXDO7M6VddssubNna/XySoe/NvHk/dubNvn2PCaBvDWf/JBHbI+JSRJTr0ZUJhut/rl1dmPr76sJUEtXqG78ntXR/XV2YquaK87bleY6kEeknSV5IDC7Pdu7c+VOTlcrM2Tw+Nn/63bG5c+efOnl68sTMiZkzE0ePHjk8/uwzE083qfWvFztq5ED+d+8Hs/v2vPLWxdemjl18+4evs/ru3l8/lLWjozzbMJw1/I/6Z9N47LFuF9Zj/1avtzMp9bo2tCvrGqW8c16KcgzE9YtXjpc/7mnlgDWVPbM3tz68WAU2sCR6XQOgN4ov+uz3b7HdoaHHunDlhfoPoKzd1/KtfqQUaZ5mcA3LH46IY4v/fJFt0TAPUW0ybwAAcLu+zcY/TzYb/6Wxe1m6Hfna0FBE3BMROyPi3ojYFRH3RdTS3h8RD3RY/nBD/MbxZ3r5lhrWpmz891y+trVy/FeM/mJoII/dXWv/YHL8ZGXmUP6ZjMTg5iw+3izzIouXfv6sVfnLx3/ZlpVfjAXzTC6X6hN0W4o905Pzk90alF75KGJvqVn7k6WVgCQi9kTE3s6y3lEETj7+1b5WiW7e/lV0YZ2p+mWRycJiNLS/kKy+Pjm2JSozh8aKu+JGP/504fVW5d9W+7sgu/5bV97/DSnKfybL12vnlg48324ZF375tOVvylL79/+S7P7flLxZW7PelO97f3J+/ux4xKbk1Vp8xf6J6+cW8SJ91v6Rg837/878nKz9D0ZEdhPvj4iHIuJAfu0ejohHIuLgKu3//sVH32l1bD1c/+mmz7+l+39o5fXvPDBw6rtvWpXf3vPvSC00ku+pPf9uonV1isdotufY3K1+bgAAAPB/kkbE9kjS0aVwmo6O1v8P/67YmlZm5+afOD773pnp+jsCQzGYFjNd5WXzoePJYp5jPT6RzxUXxw/n88afD9xVi49OzVame9x26HfbWvT/zG8Dva4dsOa8rwX9q7H/pz2qB3Dn+f6H/qX/Q/+6of97IEDfaNbdP2yIWwuAjaha7vgUE4SwYRjuQ//S/6F/6f/Ql27nvf61CpRWeXtfoMeBrRFRC0S6LuqzbgIH1lFvKnWhd/f4wQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAl/wUAAP//xgL2dQ==") open(0x0, 0x0, 0x2) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r4 = open(&(0x7f00000011c0)='.\x00', 0x8000, 0x14b) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000001200)=@v1={0x0, @adiantum, 0x4, @desc1}) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x8) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xff2e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000340)={0x3, &(0x7f0000000380)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r5, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000ac0)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) close_range(r6, r5, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000200)={0x0, 0x200005, 0x400007f, 0x4000006, 0x4, "42341f9b1000007e4f00"}) 973.14591ms ago: executing program 6 (id=1721): r0 = open(&(0x7f0000000400)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) ioctl$BTRFS_IOC_DEFRAG(r0, 0x401070cd, 0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x3, 0x8, 0x401, 0x0, 0x0, {0x7633f0642283fe94, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048090}, 0x24040001) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000040)={0x1f, 0x5, 0x2}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15) 947.839543ms ago: executing program 6 (id=1723): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x400, &(0x7f0000000500)={[{@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x4a6, &(0x7f0000000740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000c00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000c40)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000c80)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000cc0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000d40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000dc0), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f0000000e40), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) r4 = syz_open_procfs(r3, &(0x7f0000000000)='net/route\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000080)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000001340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000001580)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000000100)=0x6, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0x4, &(0x7f0000000600)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4}]}, &(0x7f0000000640)='GPL\x00', 0x5, 0xfd90, &(0x7f0000001200)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000001300), 0xb5}, 0x48) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@deltfilter={0x34, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x268, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x600, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 893.621978ms ago: executing program 5 (id=1724): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r0, &(0x7f0000000040)='./mnt\x00', r0, &(0x7f0000000080)='./mnt\x00') r1 = syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000600)={0x2c, 0x0, &(0x7f0000019b40)=ANY=[@ANYBLOB="0003b4000000b4034abd6fa910c272c35e28a08b88731ad41f34617d61ac816c95afc9533df1db947c63325dff0fd688f7546e84471de50e7d163c7325117575dbff34aa68a59aaeac127b"], 0x0, 0x0, 0x0}, 0x0) 685.46312ms ago: executing program 1 (id=1727): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000780)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, &(0x7f0000000800)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap$IORING_OFF_SQ_RING(0xfffffffffffff001, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 685.20692ms ago: executing program 1 (id=1728): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x10, &(0x7f0000000440)="1700000002000100400000005e687a8a12003c00020300ccff3f0100000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b69f0dec25a02aff0601150b000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8) recvmmsg(r4, 0x0, 0x0, 0x10141, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000500)=""/112) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 685.03373ms ago: executing program 1 (id=1729): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f00000004c0)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) capset(&(0x7f0000000280)={0x20071026}, &(0x7f00000002c0)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x46, &(0x7f0000000340)={0x2a, 0x0}, 0x10) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)="8e12e763081b3d", 0x7}], 0x1) 624.943236ms ago: executing program 7 (id=1730): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="2c0000001a", 0x5) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000c80)={0x0}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000840) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000100)={0x1, 0x0, [{0x6, 0x4, 0x5, 0x1, 0xfff, 0x3ff, 0x8}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 572.206271ms ago: executing program 7 (id=1732): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x140000000) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x4, 0x12, r0, 0xf2f46000) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000980)='\x00\x00\x03\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xb7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\ntZ\xd1\xcdT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xee\x0f\x00\x00\x00\x00\x00\x004\xbb\xe8Co\xb3\xd3\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x81\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x12\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd\x00') 571.170491ms ago: executing program 7 (id=1733): r0 = socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000000090400001202060000052406000005240004000d240f0100000000000000000009058258"], 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x30, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_GET_SREGS2(r3, 0x8140aecc, &(0x7f0000000180)) bind$xdp(r0, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x11, r0, 0x100000000) 221.338297ms ago: executing program 5 (id=1736): r0 = openat(0xffffffffffffff9c, &(0x7f0000011b80)='./file1\x00', 0x80342, 0x168) pwrite64(r0, &(0x7f0000011bc0)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000011c00)='./file1\x00', 0x101042, 0x15) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000027c0), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000002800)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x4f, 0x4f, 0x46, 0x43, 0x4f, 0x50, 0x43, 0x4f, 0x43, 0x43, 0x43]}, 0x81) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000380)) fcntl$setpipe(r4, 0x407, 0x0) read$FUSE(r3, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r4, &(0x7f0000002400)={0x90, 0x0, 0x0, {0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, {0x2, 0xb3b, 0x0, 0x0, 0x20000000000007f, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, r5, r6, 0x3, 0x5}}}, 0x90) fchown(r0, 0xee00, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r7, 0x0, 0xcc0, 0x0, &(0x7f0000000280)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) r10 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000024c0)=@base={0x11, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000002540)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0x1, 0xd, &(0x7f0000002640)=ANY=[@ANYBLOB="18000000000000000010000000007a0ab8fffeffffff181100"/36, @ANYRES32=r11, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff85000000010000009500000000000000"], &(0x7f00000026c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002700)={r13, 0x0, 0xe, 0x0, &(0x7f0000002780)='\x00'/14, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) openat(r1, &(0x7f0000002840)='./file1\x00', 0x200100, 0x0) r14 = syz_pidfd_open(r10, 0x0) setns(r14, 0x4000000) r15 = io_uring_setup(0x645, &(0x7f0000000000)={0x0, 0x7a76, 0x3201, 0x1, 0x969}) creat(&(0x7f0000010f40)='./file1\x00', 0x80) io_uring_enter(r15, 0x0, 0xcb, 0xf, &(0x7f0000010c00), 0x18) 221.054017ms ago: executing program 4 (id=1737): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@deltfilter={0x34, 0x2d, 0x5, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0x3, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 220.943007ms ago: executing program 4 (id=1738): r0 = syz_open_procfs(0x0, &(0x7f0000001200)='net/route\x00') lseek(r0, 0x80000002, 0xf5ff) 190.300501ms ago: executing program 4 (id=1739): r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2c, 0xe, 0x0, 0x2f}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)="0b92c17c998f92cfc4f572e4e2ed6e9938e31d636088f1d3b696b4fdcf64d72138e3eab3fdd8fa0f07c97b19152dde6200a22abfaad7442e3f640abb136dd419c0731c8096da82f8233aed9ecb1228d6b70ccbdc0ea89ee3fd41959c831fde", 0x5f}, {&(0x7f00000000c0)="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", 0xfa}, {&(0x7f00000001c0)="f2728994cd853b28d9342a7ada8a0621694af90f352f073d53c22fdd8e8174e1ffac46db5a8e", 0x26}, {&(0x7f0000000200)="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", 0xff}], 0x4, 0x0, 0x0, 0x20000800}, 0x400c010) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000380)={'batadv_slave_0\x00', 0x4000}) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000013c0)={&(0x7f00000003c0)=""/4096, 0x1017000, 0x1400, 0x3, 0x1}, 0x20) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000001400), &(0x7f0000001440)=0x30) (rerun: 32) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000001480)={0x6, 'lo\x00', {0x7}, 0x4}) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f00000014c0)=[@ioring_restriction_sqe_flags_required, @ioring_restriction_register_op={0x0, 0x14}], 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000001500), &(0x7f0000001540)=0x30) (async) socket$inet(0x2, 0x800, 0x3) (async, rerun: 64) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000001580), &(0x7f00000015c0)=0x30) (rerun: 64) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001600)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$selinux_create(r3, &(0x7f0000001640)=@objname={'system_u:object_r:auditd_exec_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x5, 0x20, './file0\x00'}, 0x4f) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), r3) (async) getpeername$packet(r3, &(0x7f0000001740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001780)=0x14) (async) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000017c0)={@private, @rand_addr, 0x0}, &(0x7f0000001800)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001840)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001900)={'syztnl1\x00', &(0x7f0000001880)={'sit0\x00', 0x0, 0x80, 0x1, 0x7bd7, 0xb2, {{0x12, 0x4, 0x3, 0x1f, 0x48, 0x66, 0x0, 0xeb, 0x29, 0x0, @loopback, @rand_addr=0x64010101, {[@generic={0x7, 0xb, "1f4094afee7ca99ac3"}, @noop, @rr={0x7, 0xf, 0x1, [@multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0x8a, 0x3, 0x0, [{@multicast1, 0x100}, {@empty, 0x80000000}]}, @ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000001a40)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001940)={0xb8, r4, 0x20, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24000004}, 0x40080c4) (async) pwrite64(r0, &(0x7f0000001a80)="2b5ab703897e9597d5", 0x9, 0x461b) (async) r9 = syz_genetlink_get_family_id$team(&(0x7f0000001b00), r3) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001b40)={'batadv_slave_0\x00', 0x0}) (async, rerun: 64) getsockname$packet(r3, &(0x7f0000001b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001bc0)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000001c00)={@rand_addr, @multicast1, 0x0}, &(0x7f0000001c40)=0xc) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000001f00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001c80)={0x234, r9, 0x800, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}]}, 0x234}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001f40)={0x0, @local, @remote}, &(0x7f0000001f80)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000002040)={'gretap0\x00', &(0x7f0000001fc0)={'syztnl2\x00', r13, 0x20, 0x8, 0x1000, 0x9, {{0xd, 0x4, 0x1, 0x6, 0x34, 0x65, 0x0, 0x5, 0x29, 0x0, @empty, @remote, {[@generic={0x7, 0x2}, @end, @generic={0x89, 0x3, '@'}, @rr={0x7, 0x3, 0x26}, @ra={0x94, 0x4, 0x1}, @generic={0x89, 0x3, 'K'}, @timestamp_addr={0x44, 0xc, 0xb8, 0x1, 0x9, [{@rand_addr=0x64010101, 0x40}]}, @ra={0x94, 0x4}]}}}}}) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000002080), &(0x7f00000020c0)=0x30) (async) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000002100)={0x1, 0x1, 0xd, r14, 0x5ad}, 0xc) 173.875092ms ago: executing program 5 (id=1740): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000052"], 0x1c}, 0x1, 0x0, 0x0, 0x20005891}, 0x20000000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x103, 0x100, 0x551}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x4f00, 0x500, 0x100, 0x1, 0x4000}}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@rdmsr={0x66, 0x18, {0x400000f3}}], 0x18}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000280)={0x400, 0x1422, 0xa}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 94.31375ms ago: executing program 5 (id=1741): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000c00)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000c40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000cc0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) recvmmsg(r1, &(0x7f0000000d80), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f00000000c0)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x6, 0x400, @empty, 0x7f}, 0x1c) io_setup(0x6, &(0x7f0000000180)=0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000001c0)={0x33}, 0x8) io_submit(r3, 0x1, &(0x7f0000000200)=[&(0x7f0000000280)={0x180a, 0x3000, 0x3, 0x1, 0x80, r2, 0x0, 0x30}]) r4 = socket(0x10, 0x80002, 0x0) utimes(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)={{}, {0x0, 0xea60}}) sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) 83.319961ms ago: executing program 1 (id=1742): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="2c0000001a", 0x5) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000c80)={0x0}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000840) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000100)={0x1, 0x0, [{0x6, 0x4, 0x5, 0x1, 0xfff, 0x3ff, 0x8}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 75.372872ms ago: executing program 4 (id=1743): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='proc\x00', 0x1000, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) pipe2$9p(0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x2) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x115) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/block/ram0/queue/discard_max_bytes\x00', 0x1a1041, 0x171) r1 = eventfd(0x1) write(r1, &(0x7f0000000200)="02d8", 0xfffffffffffffc28) 33.684587ms ago: executing program 1 (id=1744): bpf$PROG_LOAD(0x5, &(0x7f0000002700)={0x13, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180200000300000000000000000000008500000027000000850000000800000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000140), 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000029c0)=@newqdisc={0xfc, 0x24, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xffe0}, {0xe, 0xb}, {0xa, 0xc}}, [@TCA_STAB={0xd4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xd4, 0xef, 0x5, 0x0, 0xfffffffb, 0x5, 0x2}}, {0x8, 0x2, [0x101, 0x3]}}, {{0x1c, 0x1, {0x3f, 0xe, 0x600, 0x800003, 0x0, 0x8, 0xce, 0x4}}, {0xc, 0x2, [0x4000, 0x1, 0x4, 0x7]}}, {{0x1c, 0x1, {0x29, 0x3, 0x90b, 0xf9, 0x1, 0x80000000, 0x9, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0xa, 0x6, 0x9, 0x5, 0x2, 0x3, 0x1, 0x7}}, {0x12, 0x2, [0x81, 0x3, 0x5f98, 0x0, 0x7f, 0x4, 0x3ff]}}, {{0x1c, 0x1, {0xff, 0x5, 0x0, 0xc5a, 0x2, 0x7f, 0x7, 0x7}}, {0x12, 0x2, [0x9, 0x3, 0x81f2, 0x900, 0x9, 0x100, 0x3]}}]}, @TCA_STAB={0x4}]}, 0xfc}}, 0x20000000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000340)=0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newtfilter={0x24, 0x2c, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xf, 0xfff1}, {}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='smaps\x00') r5 = memfd_create(&(0x7f0000000500)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad;\x92\n\x8d\xb6I\x1fQ\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\xa7Wd\xa4Eu\x8cs\xe0\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceYH\x8f\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xbf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xb6\x87\xa43\xdc50V-\x13F\xb6&\xcb\xa3\xe0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xad\xcf`*8&\feeV\x17U=(\xff\xe5t\xe4\xe6\xd8\x8f\x81\xa02\xfed\xde\x03\xdbN98\xb1\x8b\xccg2_\xc4bA\xf1\xf8\xfb\xf8\xd0\xfb_\x1e\"\xedF\x17$\x9e\xd8\xae\xc1\xaf\xee%\x1c\xc6V\x17\x03\xa6&\xa86\xc3\xd5\x02\x10g\x02(EI\x8d\x19\xefJ\xc1x\x92\x8c\x05\xb9\xd2Y\xa0\x13|\x95\xce\x86in\xd4\xd0\xb4\x02?gl\x8f\x1e\xa0\xe5\xf9\xe5\xc9\x9eG\xa9\x14\xff\xe2p\xb4\xda\x1b\t\xc7t\xe3\xe8\xb2\xa5\\\xc6\f\r\xb4\xc1o\x9aS\xf2+\xf7\r04\xb3\xf8\xe38\v\xa4\xbdf', 0x1) mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r5, 0xbc4cd000) read$FUSE(r4, &(0x7f00000006c0)={0x2020}, 0x2020) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x1390, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000002940)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x1, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000feffffff18600000100080000000000002000000cc810400040000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r6, 0x0, 0x0, 0x20000845, &(0x7f0000002900)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}}, 0x1c) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) 33.420657ms ago: executing program 4 (id=1745): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x3d, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 32.516067ms ago: executing program 6 (id=1746): r0 = open(&(0x7f0000000400)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) ioctl$BTRFS_IOC_DEFRAG(r0, 0x401070cd, 0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x3, 0x8, 0x401, 0x0, 0x0, {0x7633f0642283fe94, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048090}, 0x24040001) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000040)={0x1f, 0x5, 0x2}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15) 1.2028ms ago: executing program 1 (id=1747): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000900)={@multicast2, @local}, 0xc) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000980)={@multicast2, @local, @remote}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000880)={0x0, 0x18, &(0x7f00000008c0)={&(0x7f0000000a40)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 891.7µs ago: executing program 4 (id=1748): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x200008, &(0x7f00000001c0)=ANY=[], 0x1, 0x392, &(0x7f0000000440)="$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") (async) openat$dir(0xffffffffffffff9c, &(0x7f00000016c0)='./file0\x00', 0x0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000c80)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x800}}], 0x1, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) io_uring_enter(r1, 0x202f, 0xdff, 0x80, &(0x7f0000000080)={[0x9]}, 0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) (async, rerun: 32) ioctl$TUNSETLINK(r1, 0x400454cd, 0x305) (rerun: 32) socket$tipc(0x1e, 0x5, 0x0) 0s ago: executing program 6 (id=1749): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noload}, {@journal_checksum}, {@noblock_validity}, {@resgid={'resgid', 0x3d, r2}}, {@nodioread_nolock}, {@errors_continue}]}, 0xfa, 0x4a3, &(0x7f0000000340)="$eJzs3ctvVNUfAPDvvX3CD35FxAcIUkUi8dHS8pCFG40mLDQx0QXGVS2FVIoY2oUQotUFLg2Je+LWv8C40o1RN5q41b0hIYYNiJsxd+69dtrOTFtmyrTO55NMe87c0znne++cueeeMzMNoGsNZz+SiG0R8VtEDOXZxQWG8193bl2Z/OvWlckkKpU3/0yq5W7fujJZFi3/7n95plIp8gN16r36TsTEzMzUxSI/Onf+g9HZS5efnz4/cXbq7NT74ydOHD2yr//4+LFWQxyMIq7bez66sHf3ybevvT556tq7PyZp5HHHkjjaZTjfu3UdbHdlHba9Jp30RrnbI2L/zwtb6j0T6KSeiMgOV1+1/w9FT2z5d9tQvPppRxsHrKtKpVJp8qo8XwH+w5LodAuAzihP9Nn1b3m7T0OPDeHmS/kFUBb3neKWb+mNNE/s71tyfdtOwxFxav7u9ewW6zQPAQBQ69ts/PNcvfFfGg/nif7sx/+LNZQdEfFAROyMiAcjYldEPBRRLftIRDy6xvqXrpAsH/+kN+45uFXIxn8vFmtbi8d/aVlkR0+R216Nvy85Mz0zdbjYJ4eib+DMdDI11qSO71759fNG26rjv3IwPn/3elZ/ORYs2nGjd8kE3emJuYlWYq5185OIPb314k+q6wJRrOvtjog991jH9DO9DbfVjn9P1Y2/icYPu2qVLyOezo//fCyJv5Q0XJ8ce+H4+LHRwZiZOjxaPiuW++mXq280qr+l+NsgO/5bq/GX14LL4t+RDEbMXrp8rrpeO7v2Oq7+/lnDa5qV41/0/D+5vXj+9ydvVe/oLzZ8ODE3d3Esoj95bfn94wuPVubL8ln8hw7U7/87Y2FPPBYReyNiX0Q8nl0UFm1/IiKejIgDTeL/4eWn3lt7/PVn5fua1HMvsvhP1339qzn+UXv8157oOff9NyvHPxgRjY7/0WrqUHHPal7/VtvAVvYdAAAAbBb5e+CTdKRML7z9N3bF1nTmwuzcs2fy2ZRt+fxnWs50DdXMh44Vc8NlfnxJ/kgxb/xFz5ZqfmTywszpzoUNFJ/VWdT/I01HRvJtf/R0unXAumvDOhqwSen/0L30f+hOyYr9v91vOQI2Eud/6F71+v/HDUuPfL2ujQHuK+d/6F6r6P/z+a/GowJgc3L+h+6l/0NXavjZ+LSlj/y3NbHvq7ytzcr8XXyFSsuVJhsi5E2QiPQ+1TUQxb+K6HjInUn0Nv8yi4MRscLj9C3vy5WhvE9l9wzU/auOviwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0zT8BAAD//+t32/E=") syz_usb_control_io(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00260591e02f9cf1134f0000672cf878d6"], 0x0}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000900), 0x200000, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f0000001f40)={'syztnl0\x00', 0x0, 0x8, 0x7800, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffd14, 0x3, 0x0, 0x6, 0x4, 0x0, @remote, @local}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0x20, &(0x7f0000000a80)={&(0x7f0000000980)=""/115, 0x73, 0x0, &(0x7f0000000a00)=""/107, 0x6b}}, 0x10) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c80)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x1ff}, [@generic={0x8, 0xb, 0xd, 0x89, 0x6}]}, &(0x7f0000000b40)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000b80)=""/4096, 0x40f00, 0x4, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001b80)={0x1, 0x8}, 0x8, 0x10, &(0x7f0000001bc0)={0x1, 0x4, 0x3, 0x26e}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001c40)=[{0x1, 0x5, 0x5, 0x4}, {0x4, 0x1, 0x10, 0x9}, {0x5, 0x3, 0xd, 0x6}], 0x10, 0xfc8}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x101, '\x00', r3, 0xffffffffffffffff, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x17, 0x3, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000880)='syzkaller\x00', 0x6, 0x1f, &(0x7f00000008c0)=""/31, 0x41000, 0x30, '\x00', r3, @cgroup_sysctl=0x12, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001dc0)={0x1, 0xd, 0x0, 0x4}, 0x10, r6, r7, 0x2, &(0x7f0000001f00)=[r8, r8], &(0x7f0000001e00)=[{0x0, 0x5, 0x3, 0x6}, {0x1, 0x2, 0x10, 0x8}], 0x10, 0x7}, 0x94) kernel console output (not intermixed with test programs): roduct=0, SerialNumber=1 [ 189.188141][ T2132] usb 5-1: SerialNumber: syz [ 189.193235][ T688] usb 7-1: USB disconnect, device number 14 [ 189.200524][ T2132] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 189.249181][ T2953] loop7: detected capacity change from 0 to 512 [ 189.259159][ T2953] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 189.277754][ T2953] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 189.286895][ T2953] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.504174][ T2132] usb 5-1: USB disconnect, device number 21 [ 189.709479][ T28] audit: type=1400 audit(1792823327.768:2334): avc: denied { create } for pid=2960 comm="syz.5.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 189.729156][ T2962] loop1: detected capacity change from 0 to 128 [ 189.739898][ T2962] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 189.753591][ T2962] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.776207][ T288] EXT4-fs (loop1): unmounting filesystem. [ 189.951368][ T2969] loop6: detected capacity change from 0 to 1024 [ 190.396822][ T1531] EXT4-fs (loop7): unmounting filesystem. [ 190.461377][ T2969] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 190.830478][ T2979] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 190.911835][ T1092] EXT4-fs (loop6): unmounting filesystem. [ 191.235115][ T688] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 191.416288][ T688] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 191.427290][ T688] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 191.440836][ T688] usb 7-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 191.450109][ T688] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.463043][ T688] usb 7-1: config 0 descriptor?? [ 191.941779][ T688] wacom 0003:056A:037A.0014: unknown main item tag 0x3 [ 191.958495][ T688] wacom 0003:056A:037A.0014: Unknown device_type for 'HID 056a:037a'. Assuming pen. [ 191.983663][ T688] wacom 0003:056A:037A.0014: hidraw0: USB HID vf.ff Device [HID 056a:037a] on usb-dummy_hcd.6-1/input0 [ 192.012388][ T688] input: Wacom One by Wacom S Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:037A.0014/input/input55 [ 192.148805][ T48] usb 7-1: USB disconnect, device number 15 [ 192.255096][ T1735] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 192.517754][ T1735] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 532, setting to 64 [ 192.633872][ T1735] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 193.135122][ T3007] loop7: detected capacity change from 0 to 40427 [ 193.145453][ T3007] F2FS-fs (loop7): fault_injection options not supported [ 193.152747][ T3007] F2FS-fs (loop7): fault_type options not supported [ 193.159833][ T3007] F2FS-fs (loop7): invalid crc value [ 193.860001][ T3019] FAULT_INJECTION: forcing a failure. [ 193.860001][ T3019] name failslab, interval 1, probability 0, space 0, times 0 [ 193.891712][ T1735] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 193.906604][ T3019] CPU: 1 PID: 3019 Comm: syz.6.801 Not tainted syzkaller #0 [ 193.913951][ T3019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 193.924040][ T3019] Call Trace: [ 193.927342][ T3019] [ 193.930306][ T3019] __dump_stack+0x21/0x24 [ 193.934698][ T3019] dump_stack_lvl+0x110/0x170 [ 193.939402][ T3019] ? __cfi_dump_stack_lvl+0x8/0x8 [ 193.944899][ T3019] dump_stack+0x15/0x24 [ 193.949091][ T3019] should_fail_ex+0x3bf/0x510 [ 193.953812][ T3019] __should_failslab+0xac/0xf0 [ 193.958617][ T3019] should_failslab+0x9/0x20 [ 193.963167][ T3019] __kmem_cache_alloc_node+0x3d/0x2d0 [ 193.968603][ T3019] ? __list_lru_init+0xa6/0x380 [ 193.973491][ T3019] ? __cfi_mutex_unlock+0x10/0x10 [ 193.978595][ T3019] ? kasan_save_alloc_info+0x1f/0x30 [ 193.983904][ T3019] ? __list_lru_init+0xa6/0x380 [ 193.988794][ T3019] kmalloc_trace+0x29/0xb0 [ 193.993234][ T3019] __list_lru_init+0xa6/0x380 [ 193.997928][ T3019] alloc_super+0x714/0x850 [ 194.002377][ T3019] sget_fc+0x2d8/0x770 [ 194.006483][ T3019] ? __cfi_set_anon_super_fc+0x10/0x10 [ 194.011979][ T3019] ? __cfi_proc_fill_super+0x10/0x10 [ 194.017295][ T3019] get_tree_nodev+0x2a/0x170 [ 194.021941][ T3019] ? proc_get_tree+0xd/0x20 [ 194.026467][ T3019] proc_get_tree+0x1c/0x20 [ 194.030912][ T3019] vfs_get_tree+0x9a/0x270 [ 194.035354][ T3019] do_new_mount+0x251/0xb40 [ 194.039877][ T3019] ? security_capable+0x99/0xc0 [ 194.044766][ T3019] path_mount+0x640/0xfd0 [ 194.049115][ T3019] __se_sys_mount+0x320/0x390 [ 194.053810][ T3019] ? __this_cpu_preempt_check+0x13/0x20 [ 194.059392][ T3019] ? __x64_sys_mount+0xd0/0xd0 [ 194.064174][ T3019] ? __kasan_check_write+0x14/0x20 [ 194.069307][ T3019] ? fpregs_restore_userregs+0x128/0x260 [ 194.074963][ T3019] __x64_sys_mount+0xbf/0xd0 [ 194.079577][ T3019] x64_sys_call+0x65d/0x9a0 [ 194.084105][ T3019] do_syscall_64+0x4c/0xa0 [ 194.088547][ T3019] ? clear_bhb_loop+0x30/0x80 [ 194.093247][ T3019] ? clear_bhb_loop+0x30/0x80 [ 194.097957][ T3019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.103871][ T3019] RIP: 0033:0x7fa7d599f559 [ 194.108326][ T3019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.127956][ T3019] RSP: 002b:00007fa7d67df028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 194.136422][ T3019] RAX: ffffffffffffffda RBX: 00007fa7d5c25fa0 RCX: 00007fa7d599f559 [ 194.144418][ T3019] RDX: 0000200000000480 RSI: 0000200000000440 RDI: 0000000000000000 [ 194.152405][ T3019] RBP: 00007fa7d5a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 194.160418][ T3019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.168408][ T3019] R13: 00007fa7d5c26038 R14: 00007fa7d5c25fa0 R15: 00007ffc7b11b848 [ 194.176406][ T3019] [ 194.185277][ T1735] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 194.194366][ T1735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 194.216507][ T3007] F2FS-fs (loop7): Found nat_bits in checkpoint [ 194.243750][ T1735] usb 2-1: SerialNumber: syz [ 194.248887][ T3029] loop6: detected capacity change from 0 to 128 [ 194.256094][ T1735] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 194.264270][ T3024] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 194.286362][ T3029] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 194.300890][ T3007] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 194.301255][ T3029] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.336472][ T1092] EXT4-fs (loop6): unmounting filesystem. [ 194.384499][ T1531] syz-executor: attempt to access beyond end of device [ 194.384499][ T1531] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 194.435239][ T3037] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 194.458206][ T2132] usb 2-1: USB disconnect, device number 17 [ 194.595092][ T1735] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 194.755104][ T19] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 194.775118][ T1735] usb 5-1: Using ep0 maxpacket: 16 [ 194.783099][ T1735] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 194.792295][ T1735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.800373][ T1735] usb 5-1: Product: syz [ 194.804618][ T1735] usb 5-1: Manufacturer: syz [ 194.814056][ T1735] usb 5-1: SerialNumber: syz [ 194.820116][ T1735] r8152-cfgselector 5-1: config 0 descriptor?? [ 194.936359][ T19] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 194.947242][ T19] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 194.960269][ T19] usb 7-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 194.969783][ T19] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.139440][ T3049] overlayfs: failed to clone upperpath [ 195.298807][ T3053] loop1: detected capacity change from 0 to 512 [ 195.422643][ T3053] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 195.608345][ T3053] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 196.598017][ T3053] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.105582][ T19] usb 7-1: config 0 descriptor?? [ 197.111697][ T288] EXT4-fs (loop1): unmounting filesystem. [ 197.131552][ T3072] loop1: detected capacity change from 0 to 128 [ 197.144580][ T3070] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 197.154093][ T3072] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 197.166830][ T28] audit: type=1400 audit(1792823335.228:2335): avc: denied { create } for pid=3075 comm="syz.7.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 197.193958][ T3072] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.221519][ T288] EXT4-fs (loop1): unmounting filesystem. [ 197.255809][ T3078] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 197.271239][ T1735] r8152-cfgselector 5-1: Unknown version 0x0000 [ 197.279291][ T1735] r8152-cfgselector 5-1: bad CDC descriptors [ 197.297611][ T3088] loop4: detected capacity change from 0 to 128 [ 197.304520][ T1735] r8152-cfgselector 5-1: Unknown version 0x0000 [ 197.318052][ T1735] r8152-cfgselector 5-1: USB disconnect, device number 22 [ 197.334166][ T3088] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 197.343324][ T3088] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.371107][ T286] EXT4-fs (loop4): unmounting filesystem. [ 198.507743][ T19] wacom 0003:056A:037A.0015: unknown main item tag 0x3 [ 198.515224][ T688] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 198.523554][ T332] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 198.534027][ T19] wacom 0003:056A:037A.0015: Unknown device_type for 'HID 056a:037a'. Assuming pen. [ 198.559254][ T19] wacom 0003:056A:037A.0015: hidraw0: USB HID vf.ff Device [HID 056a:037a] on usb-dummy_hcd.6-1/input0 [ 198.585423][ T19] input: Wacom One by Wacom S Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:037A.0015/input/input58 [ 198.601771][ T19] usb 7-1: USB disconnect, device number 16 [ 198.683635][ T3103] fido_id[3103]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 198.728447][ T332] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 532, setting to 64 [ 198.739399][ T688] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 198.755063][ T688] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 198.766916][ T332] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 199.252292][ T688] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.265601][ T332] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 199.280655][ T332] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 199.290027][ T332] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 199.299900][ T688] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 199.315076][ T332] usb 8-1: SerialNumber: syz [ 199.320331][ T688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.329316][ T688] usb 2-1: Product: syz [ 199.333637][ T688] usb 2-1: Manufacturer: syz [ 199.339114][ T332] cdc_ether: probe of 8-1:1.0 failed with error -22 [ 199.346013][ T688] usb 2-1: SerialNumber: syz [ 199.360385][ T3115] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 199.360419][ T3086] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 199.375497][ T3086] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 199.383567][ T3118] FAULT_INJECTION: forcing a failure. [ 199.383567][ T3118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.398561][ T3118] CPU: 1 PID: 3118 Comm: syz.4.831 Not tainted syzkaller #0 [ 199.405902][ T3118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 199.415991][ T3118] Call Trace: [ 199.419315][ T3118] [ 199.422291][ T3118] __dump_stack+0x21/0x24 [ 199.426662][ T3118] dump_stack_lvl+0x110/0x170 [ 199.431378][ T3118] ? __cfi_dump_stack_lvl+0x8/0x8 [ 199.436443][ T3118] dump_stack+0x15/0x24 [ 199.440639][ T3118] should_fail_ex+0x3bf/0x510 [ 199.445366][ T3118] should_fail+0xb/0x10 [ 199.449559][ T3118] should_fail_usercopy+0x1a/0x20 [ 199.454618][ T3118] _copy_to_user+0x1e/0x90 [ 199.459080][ T3118] simple_read_from_buffer+0xe9/0x160 [ 199.464679][ T3118] proc_fail_nth_read+0x1a6/0x220 [ 199.469749][ T3118] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 199.475347][ T3118] ? security_file_permission+0x94/0xb0 [ 199.480953][ T3118] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 199.486543][ T3118] vfs_read+0x286/0x930 [ 199.490745][ T3118] ? __cfi_vfs_read+0x10/0x10 [ 199.495463][ T3118] ? __kasan_check_write+0x14/0x20 [ 199.500609][ T3118] ? mutex_lock+0x93/0x1b0 [ 199.505065][ T3118] ? __cfi_mutex_lock+0x10/0x10 [ 199.509961][ T3118] ? __fdget_pos+0x2cd/0x380 [ 199.514567][ T3118] ? ksys_read+0x70/0x260 [ 199.518918][ T3118] ksys_read+0x14a/0x260 [ 199.523180][ T3118] ? __cfi_ksys_read+0x10/0x10 [ 199.527970][ T3118] ? debug_smp_processor_id+0x17/0x20 [ 199.533368][ T3118] __x64_sys_read+0x7b/0x90 [ 199.537903][ T3118] x64_sys_call+0x2f/0x9a0 [ 199.542354][ T3118] do_syscall_64+0x4c/0xa0 [ 199.546806][ T3118] ? clear_bhb_loop+0x30/0x80 [ 199.547357][ T332] usb 8-1: USB disconnect, device number 14 [ 199.551537][ T3118] ? clear_bhb_loop+0x30/0x80 [ 199.562143][ T3118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.568075][ T3118] RIP: 0033:0x7ff8fab5fd8e [ 199.572522][ T3118] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 199.592202][ T3118] RSP: 002b:00007ff8fb9abfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 199.600714][ T3118] RAX: ffffffffffffffda RBX: 00007ff8fb9ac6c0 RCX: 00007ff8fab5fd8e [ 199.601008][ T688] cdc_acm 2-1:1.1: ttyACM0: USB ACM device [ 199.608745][ T3118] RDX: 000000000000000f RSI: 00007ff8fb9ac0a0 RDI: 0000000000000008 [ 199.608763][ T3118] RBP: 00007ff8fb9ac090 R08: 0000000000000000 R09: 0000000000000000 [ 199.608777][ T3118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.608790][ T3118] R13: 00007ff8fae26038 R14: 00007ff8fae25fa0 R15: 00007ffef16a7be8 [ 199.608837][ T3118] [ 199.665926][ T3124] loop4: detected capacity change from 0 to 128 [ 199.692783][ T3124] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 199.706623][ T688] usb 2-1: USB disconnect, device number 18 [ 199.712711][ T3124] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.736101][ T286] EXT4-fs (loop4): unmounting filesystem. [ 199.775096][ T1735] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 199.955126][ T1735] usb 7-1: Using ep0 maxpacket: 16 [ 200.058902][ T1735] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 200.068659][ T1735] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.078017][ T1735] usb 7-1: Product: syz [ 200.082685][ T1735] usb 7-1: Manufacturer: syz [ 200.088319][ T1735] usb 7-1: SerialNumber: syz [ 200.118686][ T1735] r8152-cfgselector 7-1: config 0 descriptor?? [ 200.255802][ T3137] device wg1 entered promiscuous mode [ 200.336866][ T3145] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 200.387288][ T3148] FAULT_INJECTION: forcing a failure. [ 200.387288][ T3148] name fail_futex, interval 1, probability 0, space 0, times 0 [ 200.400500][ T3148] CPU: 1 PID: 3148 Comm: syz.1.844 Not tainted syzkaller #0 [ 200.407847][ T3148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 200.417916][ T3148] Call Trace: [ 200.421206][ T3148] [ 200.424147][ T3148] __dump_stack+0x21/0x24 [ 200.428494][ T3148] dump_stack_lvl+0x110/0x170 [ 200.433188][ T3148] ? __cfi_dump_stack_lvl+0x8/0x8 [ 200.438222][ T3148] ? enqueue_task_fair+0xbee/0x1d70 [ 200.443454][ T3148] dump_stack+0x15/0x24 [ 200.447622][ T3148] should_fail_ex+0x3bf/0x510 [ 200.452334][ T3148] should_fail+0xb/0x10 [ 200.456505][ T3148] get_futex_key+0x170/0xb10 [ 200.461124][ T3148] ? 0xffffffffa00006c8 [ 200.465308][ T3148] ? is_bpf_text_address+0x177/0x190 [ 200.470609][ T3148] ? __cfi_get_futex_key+0x10/0x10 [ 200.475742][ T3148] futex_wake+0x150/0x8e0 [ 200.480095][ T3148] ? __cfi_futex_wake+0x10/0x10 [ 200.484955][ T3148] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 200.490451][ T3148] ? perf_lock_task_context+0x3fd/0x4c0 [ 200.496021][ T3148] ? perf_event_exit_event+0x530/0x530 [ 200.501512][ T3148] ? mutex_unlock+0x8f/0x230 [ 200.506114][ T3148] do_futex+0x2bf/0x430 [ 200.510285][ T3148] ? __cfi_do_futex+0x10/0x10 [ 200.514971][ T3148] ? __kasan_check_write+0x14/0x20 [ 200.520142][ T3148] mm_release+0x195/0x2d0 [ 200.524482][ T3148] ? exit_mm_release+0x30/0x30 [ 200.529259][ T3148] ? futex_exit_release+0x119/0x1e0 [ 200.534472][ T3148] exit_mm_release+0x25/0x30 [ 200.539097][ T3148] do_exit+0x8de/0x29f0 [ 200.543360][ T3148] ? __cfi_do_exit+0x10/0x10 [ 200.547964][ T3148] ? _raw_spin_lock+0xa1/0xf0 [ 200.552662][ T3148] ? plist_check_list+0x255/0x270 [ 200.557713][ T3148] ? __kasan_check_write+0x14/0x20 [ 200.562836][ T3148] ? _raw_spin_lock_irq+0x95/0xf0 [ 200.567884][ T3148] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 200.573444][ T3148] do_group_exit+0x21b/0x2e0 [ 200.578072][ T3148] ? __kasan_check_write+0x14/0x20 [ 200.583204][ T3148] ? recalc_sigpending+0x168/0x1c0 [ 200.588347][ T3148] get_signal+0x167c/0x1700 [ 200.592893][ T3148] ? __cfi_get_signal+0x10/0x10 [ 200.597781][ T3148] arch_do_signal_or_restart+0xd1/0x11c0 [ 200.603441][ T3148] ? do_futex+0x2e2/0x430 [ 200.607795][ T3148] ? selinux_bpf+0xce/0xf0 [ 200.612222][ T3148] ? __cfi_do_futex+0x10/0x10 [ 200.616904][ T3148] ? __sys_bpf+0x5ee/0x850 [ 200.621330][ T3148] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 200.627490][ T3148] ? __se_sys_futex+0x136/0x310 [ 200.632976][ T3148] exit_to_user_mode_loop+0x7a/0xb0 [ 200.638197][ T3148] exit_to_user_mode_prepare+0x87/0xd0 [ 200.643675][ T3148] syscall_exit_to_user_mode+0x1a/0x30 [ 200.649175][ T3148] do_syscall_64+0x58/0xa0 [ 200.653624][ T3148] ? clear_bhb_loop+0x30/0x80 [ 200.658312][ T3148] ? clear_bhb_loop+0x30/0x80 [ 200.663005][ T3148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.668907][ T3148] RIP: 0033:0x7f26e679f559 [ 200.673351][ T3148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.692979][ T3148] RSP: 002b:00007f26e76750e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 200.701401][ T3148] RAX: fffffffffffffe00 RBX: 00007f26e6a25fa8 RCX: 00007f26e679f559 [ 200.709380][ T3148] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f26e6a25fa8 [ 200.717375][ T3148] RBP: 00007f26e6a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 200.725363][ T3148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.733342][ T3148] R13: 00007f26e6a26038 R14: 00007ffe8cbdfc80 R15: 00007ffe8cbdfd68 [ 200.741327][ T3148] [ 200.791675][ T3154] loop1: detected capacity change from 0 to 128 [ 200.815619][ T3154] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 200.824512][ T3154] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.847139][ T288] EXT4-fs (loop1): unmounting filesystem. [ 200.866364][ T2132] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 200.886991][ T1735] r8152-cfgselector 7-1: Unknown version 0x0000 [ 200.893366][ T1735] r8152-cfgselector 7-1: bad CDC descriptors [ 200.903109][ T1735] r8152-cfgselector 7-1: Unknown version 0x0000 [ 200.910121][ T1735] r8152-cfgselector 7-1: USB disconnect, device number 17 [ 201.057325][ T2132] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 201.169691][ T2132] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 201.190679][ T3165] loop6: detected capacity change from 0 to 16 [ 201.218383][ T2132] usb 8-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 201.267165][ T3165] erofs: (device loop6): mounted with root inode @ nid 36. [ 201.276630][ T2132] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.286079][ T2132] usb 8-1: config 0 descriptor?? [ 201.294002][ T3162] syz.6.849: attempt to access beyond end of device [ 201.294002][ T3162] loop6: rw=524288, sector=1347167560, nr_sectors = 256 limit=16 [ 201.308448][ T3162] syz.6.849: attempt to access beyond end of device [ 201.308448][ T3162] loop6: rw=0, sector=1347167672, nr_sectors = 32 limit=16 [ 201.322543][ T3162] syz.6.849: attempt to access beyond end of device [ 201.322543][ T3162] loop6: rw=0, sector=1347167672, nr_sectors = 32 limit=16 [ 201.336616][ T3162] syz.6.849: attempt to access beyond end of device [ 201.336616][ T3162] loop6: rw=0, sector=1347167672, nr_sectors = 32 limit=16 [ 201.350730][ T3165] syz.6.849: attempt to access beyond end of device [ 201.350730][ T3165] loop6: rw=0, sector=1347167672, nr_sectors = 32 limit=16 [ 201.364708][ T3162] syz.6.849: attempt to access beyond end of device [ 201.364708][ T3162] loop6: rw=0, sector=1347167672, nr_sectors = 32 limit=16 [ 201.379386][ T3165] syz.6.849: attempt to access beyond end of device [ 201.379386][ T3165] loop6: rw=0, sector=1347167672, nr_sectors = 32 limit=16 [ 201.393211][ T3165] syz.6.849: attempt to access beyond end of device [ 201.393211][ T3165] loop6: rw=0, sector=1347167672, nr_sectors = 32 limit=16 [ 201.435120][ T1735] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 201.442840][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 201.655061][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 201.665354][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 201.675619][ T1735] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 532, setting to 64 [ 201.686859][ T24] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.699566][ T2132] wacom 0003:056A:037A.0016: unknown main item tag 0x3 [ 201.707008][ T1735] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 201.717318][ T2132] wacom 0003:056A:037A.0016: Unknown device_type for 'HID 056a:037a'. Assuming pen. [ 201.727016][ T1735] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 201.741610][ T2132] wacom 0003:056A:037A.0016: hidraw0: USB HID vf.ff Device [HID 056a:037a] on usb-dummy_hcd.7-1/input0 [ 201.741714][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 201.763129][ T2132] input: Wacom One by Wacom S Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:056A:037A.0016/input/input61 [ 201.776880][ T1735] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.786902][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.794950][ T24] usb 5-1: Product: syz [ 201.800396][ T1735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 201.808763][ T24] usb 5-1: Manufacturer: syz [ 201.813410][ T24] usb 5-1: SerialNumber: syz [ 201.818349][ T1735] usb 2-1: SerialNumber: syz [ 201.835438][ T1735] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 201.849801][ T3164] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 201.865120][ T3164] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 201.909316][ T19] usb 8-1: USB disconnect, device number 15 [ 201.943551][ T3184] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 202.030343][ T688] usb 2-1: USB disconnect, device number 19 [ 202.197149][ T24] cdc_acm 5-1:1.1: ttyACM0: USB ACM device [ 202.264765][ T24] usb 5-1: USB disconnect, device number 23 [ 202.301067][ T28] audit: type=1400 audit(1792823340.358:2336): avc: denied { nlmsg_read } for pid=3198 comm="syz.5.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 202.324976][ T3199] netlink: 180 bytes leftover after parsing attributes in process `syz.5.859'. [ 202.493729][ T3203] loop7: detected capacity change from 0 to 16 [ 202.503366][ T3203] erofs: (device loop7): mounted with root inode @ nid 36. [ 202.512044][ T3203] syz.7.861: attempt to access beyond end of device [ 202.512044][ T3203] loop7: rw=524288, sector=1347167560, nr_sectors = 256 limit=16 [ 202.526442][ T3203] syz.7.861: attempt to access beyond end of device [ 202.526442][ T3203] loop7: rw=0, sector=1347167672, nr_sectors = 32 limit=16 [ 202.559732][ T3206] loop7: detected capacity change from 0 to 512 [ 202.566957][ T3206] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 202.590376][ T3206] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 202.599651][ T3206] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.191848][ T3226] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 203.712058][ T1531] EXT4-fs (loop7): unmounting filesystem. [ 204.164075][ T3238] FAULT_INJECTION: forcing a failure. [ 204.164075][ T3238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.191384][ T3238] CPU: 1 PID: 3238 Comm: syz.1.871 Not tainted syzkaller #0 [ 204.198746][ T3238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 204.208863][ T3238] Call Trace: [ 204.212167][ T3238] [ 204.215117][ T3238] __dump_stack+0x21/0x24 [ 204.219476][ T3238] dump_stack_lvl+0x110/0x170 [ 204.224179][ T3238] ? __cfi_dump_stack_lvl+0x8/0x8 [ 204.229229][ T3238] ? _parse_integer_limit+0x18e/0x1d0 [ 204.234644][ T3238] dump_stack+0x15/0x24 [ 204.238829][ T3238] should_fail_ex+0x3bf/0x510 [ 204.243534][ T3238] should_fail+0xb/0x10 [ 204.247738][ T3238] should_fail_usercopy+0x1a/0x20 [ 204.252796][ T3238] _copy_from_user+0x1e/0xc0 [ 204.257501][ T3238] __copy_msghdr+0x3c7/0x5b0 [ 204.263612][ T3238] ___sys_sendmsg+0x210/0x360 [ 204.268324][ T3238] ? __sys_sendmsg+0x290/0x290 [ 204.273115][ T3238] ? __kasan_check_write+0x14/0x20 [ 204.278261][ T3238] ? proc_fail_nth_write+0x180/0x200 [ 204.283622][ T3238] ? vfs_write+0xa51/0xd00 [ 204.288073][ T3238] ? __fdget+0x19c/0x220 [ 204.292348][ T3238] __x64_sys_sendmsg+0x20d/0x2e0 [ 204.297311][ T3238] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 204.302800][ T3238] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 204.308914][ T3238] x64_sys_call+0x171/0x9a0 [ 204.313483][ T3238] do_syscall_64+0x4c/0xa0 [ 204.317924][ T3238] ? clear_bhb_loop+0x30/0x80 [ 204.322633][ T3238] ? clear_bhb_loop+0x30/0x80 [ 204.327344][ T3238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.333291][ T3238] RIP: 0033:0x7f26e679f559 [ 204.337733][ T3238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.357367][ T3238] RSP: 002b:00007f26e7675028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.365820][ T3238] RAX: ffffffffffffffda RBX: 00007f26e6a25fa0 RCX: 00007f26e679f559 [ 204.374082][ T3238] RDX: 0000000020008024 RSI: 0000200000000200 RDI: 0000000000000003 [ 204.382171][ T3238] RBP: 00007f26e7675090 R08: 0000000000000000 R09: 0000000000000000 [ 204.390289][ T3238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.398299][ T3238] R13: 00007f26e6a26038 R14: 00007f26e6a25fa0 R15: 00007ffe8cbdfd68 [ 204.406314][ T3238] [ 204.554632][ T3248] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 204.705346][ T2132] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 204.715142][ T1735] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 204.865108][ T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 204.896288][ T2132] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 532, setting to 64 [ 204.907269][ T2132] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 204.917132][ T2132] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 204.931121][ T1735] usb 8-1: config 127 has an invalid interface number: 57 but max is 0 [ 204.939857][ T2132] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.949327][ T1735] usb 8-1: config 127 has no interface number 0 [ 204.955797][ T1735] usb 8-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 204.966955][ T2132] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 204.975083][ T2132] usb 5-1: SerialNumber: syz [ 204.982006][ T1735] usb 8-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 204.991911][ T2132] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 204.998627][ T1735] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.008181][ T1735] usb 8-1: Product: syz [ 205.012441][ T1735] usb 8-1: Manufacturer: syz [ 205.017191][ T1735] usb 8-1: SerialNumber: syz [ 205.023119][ T3244] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 205.046202][ T24] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 205.056221][ T24] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 205.066345][ T24] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.082529][ T24] usb 7-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 205.091781][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.099880][ T24] usb 7-1: Product: syz [ 205.104108][ T24] usb 7-1: Manufacturer: syz [ 205.108809][ T24] usb 7-1: SerialNumber: syz [ 205.114453][ T3252] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 205.121768][ T3252] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 205.185202][ T688] usb 5-1: USB disconnect, device number 24 [ 205.333596][ T24] cdc_acm 7-1:1.1: ttyACM0: USB ACM device [ 205.343621][ T24] usb 7-1: USB disconnect, device number 18 [ 205.406131][ T3259] FAULT_INJECTION: forcing a failure. [ 205.406131][ T3259] name fail_futex, interval 1, probability 0, space 0, times 0 [ 205.419045][ T3259] CPU: 1 PID: 3259 Comm: syz.1.879 Not tainted syzkaller #0 [ 205.426353][ T3259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 205.432889][ T3244] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 205.436591][ T3259] Call Trace: [ 205.436601][ T3259] [ 205.449959][ T3259] __dump_stack+0x21/0x24 [ 205.454316][ T3259] dump_stack_lvl+0x110/0x170 [ 205.459018][ T3259] ? __cfi_dump_stack_lvl+0x8/0x8 [ 205.464074][ T3259] ? inet_send_prepare+0x1e0/0x4d0 [ 205.469205][ T3259] dump_stack+0x15/0x24 [ 205.473433][ T3259] should_fail_ex+0x3bf/0x510 [ 205.478129][ T3259] should_fail+0xb/0x10 [ 205.482299][ T3259] get_futex_key+0x143/0xb10 [ 205.486928][ T3259] ? __cfi_get_futex_key+0x10/0x10 [ 205.492072][ T3259] ? import_iovec+0x7c/0xb0 [ 205.496590][ T3259] futex_wake+0x150/0x8e0 [ 205.500933][ T3259] ? __sys_sendmsg+0x290/0x290 [ 205.505723][ T3259] ? __cfi_futex_wake+0x10/0x10 [ 205.510595][ T3259] do_futex+0x2bf/0x430 [ 205.514766][ T3259] ? __cfi_do_futex+0x10/0x10 [ 205.519457][ T3259] __se_sys_futex+0x136/0x310 [ 205.524164][ T3259] ? __x64_sys_futex+0x100/0x100 [ 205.529117][ T3259] __x64_sys_futex+0xe5/0x100 [ 205.533812][ T3259] x64_sys_call+0x7ec/0x9a0 [ 205.538356][ T3259] do_syscall_64+0x4c/0xa0 [ 205.542785][ T3259] ? clear_bhb_loop+0x30/0x80 [ 205.547478][ T3259] ? clear_bhb_loop+0x30/0x80 [ 205.552256][ T3259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.558181][ T3259] RIP: 0033:0x7f26e679f559 [ 205.562612][ T3259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.582228][ T3259] RSP: 002b:00007f26e76750e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 205.590750][ T3259] RAX: ffffffffffffffda RBX: 00007f26e6a25fa8 RCX: 00007f26e679f559 [ 205.598762][ T3259] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f26e6a25fac [ 205.606743][ T3259] RBP: 00007f26e6a25fa0 R08: 0016e2e0973a0636 R09: 0000000000000000 [ 205.614732][ T3259] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 205.622717][ T3259] R13: 00007f26e6a26038 R14: 00007ffe8cbdfc80 R15: 00007ffe8cbdfd68 [ 205.630726][ T3259] [ 205.673754][ T3261] loop1: detected capacity change from 0 to 512 [ 205.682252][ T3261] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 205.706785][ T3261] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 205.716037][ T3261] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.109021][ T3271] loop6: detected capacity change from 0 to 128 [ 206.116595][ T3271] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 206.129924][ T3271] FAT-fs (loop6): error, parent dir link count too low (2) [ 206.137558][ T3271] FAT-fs (loop6): Filesystem has been set read-only [ 206.151869][ T1092] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 206.237741][ T3278] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 206.378502][ T1735] asix 8-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 206.439164][ T1735] asix: probe of 8-1:127.57 failed with error -71 [ 206.446644][ T1735] usb 8-1: USB disconnect, device number 16 [ 206.480348][ T3283] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 206.730077][ T288] EXT4-fs (loop1): unmounting filesystem. [ 207.103789][ T3292] FAULT_INJECTION: forcing a failure. [ 207.103789][ T3292] name failslab, interval 1, probability 0, space 0, times 0 [ 207.116944][ T3292] CPU: 1 PID: 3292 Comm: syz.4.889 Not tainted syzkaller #0 [ 207.124279][ T3292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 207.134369][ T3292] Call Trace: [ 207.137681][ T3292] [ 207.140640][ T3292] __dump_stack+0x21/0x24 [ 207.145004][ T3292] dump_stack_lvl+0x110/0x170 [ 207.149711][ T3292] ? __cfi_dump_stack_lvl+0x8/0x8 [ 207.154770][ T3292] ? ida_alloc_range+0x808/0x840 [ 207.159834][ T3292] dump_stack+0x15/0x24 [ 207.164018][ T3292] should_fail_ex+0x3bf/0x510 [ 207.168904][ T3292] __should_failslab+0xac/0xf0 [ 207.173712][ T3292] should_failslab+0x9/0x20 [ 207.178247][ T3292] __kmem_cache_alloc_node+0x3d/0x2d0 [ 207.183657][ T3292] ? proc_fill_super+0x77/0x760 [ 207.188548][ T3292] ? proc_fill_super+0x77/0x760 [ 207.193440][ T3292] kmalloc_trace+0x29/0xb0 [ 207.197882][ T3292] proc_fill_super+0x77/0x760 [ 207.202684][ T3292] get_tree_nodev+0xc4/0x170 [ 207.207313][ T3292] ? __cfi_proc_fill_super+0x10/0x10 [ 207.212635][ T3292] proc_get_tree+0x1c/0x20 [ 207.217090][ T3292] vfs_get_tree+0x9a/0x270 [ 207.221533][ T3292] do_new_mount+0x251/0xb40 [ 207.226068][ T3292] ? security_capable+0x99/0xc0 [ 207.230957][ T3292] path_mount+0x640/0xfd0 [ 207.235316][ T3292] __se_sys_mount+0x320/0x390 [ 207.240047][ T3292] ? __x64_sys_mount+0xd0/0xd0 [ 207.244844][ T3292] __x64_sys_mount+0xbf/0xd0 [ 207.249459][ T3292] x64_sys_call+0x65d/0x9a0 [ 207.253996][ T3292] do_syscall_64+0x4c/0xa0 [ 207.258461][ T3292] ? clear_bhb_loop+0x30/0x80 [ 207.263168][ T3292] ? clear_bhb_loop+0x30/0x80 [ 207.267882][ T3292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.273839][ T3292] RIP: 0033:0x7ff8fab9f559 [ 207.278288][ T3292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.297932][ T3292] RSP: 002b:00007ff8fb9ac028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 207.306389][ T3292] RAX: ffffffffffffffda RBX: 00007ff8fae25fa0 RCX: 00007ff8fab9f559 [ 207.314400][ T3292] RDX: 0000200000000480 RSI: 0000200000000440 RDI: 0000000000000000 [ 207.322400][ T3292] RBP: 00007ff8fac36b20 R08: 0000000000000000 R09: 0000000000000000 [ 207.330397][ T3292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.338395][ T3292] R13: 00007ff8fae26038 R14: 00007ff8fae25fa0 R15: 00007ffef16a7be8 [ 207.346407][ T3292] [ 207.779748][ T3295] FAULT_INJECTION: forcing a failure. [ 207.779748][ T3295] name fail_futex, interval 1, probability 0, space 0, times 0 [ 207.805892][ T3295] CPU: 1 PID: 3295 Comm: syz.6.890 Not tainted syzkaller #0 [ 207.813341][ T3295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 207.823438][ T3295] Call Trace: [ 207.826759][ T3295] [ 207.829753][ T3295] __dump_stack+0x21/0x24 [ 207.834114][ T3295] dump_stack_lvl+0x110/0x170 [ 207.838819][ T3295] ? __cfi_dump_stack_lvl+0x8/0x8 [ 207.843871][ T3295] ? inet_send_prepare+0x1e0/0x4d0 [ 207.849017][ T3295] dump_stack+0x15/0x24 [ 207.853208][ T3295] should_fail_ex+0x3bf/0x510 [ 207.857912][ T3295] should_fail+0xb/0x10 [ 207.862107][ T3295] get_futex_key+0x143/0xb10 [ 207.866763][ T3295] ? __cfi_get_futex_key+0x10/0x10 [ 207.871917][ T3295] ? import_iovec+0x7c/0xb0 [ 207.876465][ T3295] futex_wake+0x150/0x8e0 [ 207.880826][ T3295] ? __sys_sendmsg+0x290/0x290 [ 207.885627][ T3295] ? __cfi_futex_wake+0x10/0x10 [ 207.890531][ T3295] do_futex+0x2bf/0x430 [ 207.894714][ T3295] ? __cfi_do_futex+0x10/0x10 [ 207.899438][ T3295] __se_sys_futex+0x136/0x310 [ 207.904146][ T3295] ? __x64_sys_futex+0x100/0x100 [ 207.909120][ T3295] __x64_sys_futex+0xe5/0x100 [ 207.913824][ T3295] x64_sys_call+0x7ec/0x9a0 [ 207.918362][ T3295] do_syscall_64+0x4c/0xa0 [ 207.922806][ T3295] ? clear_bhb_loop+0x30/0x80 [ 207.927516][ T3295] ? clear_bhb_loop+0x30/0x80 [ 207.932227][ T3295] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.938155][ T3295] RIP: 0033:0x7fa7d599f559 [ 207.942604][ T3295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.962290][ T3295] RSP: 002b:00007fa7d67df0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 207.970742][ T3295] RAX: ffffffffffffffda RBX: 00007fa7d5c25fa8 RCX: 00007fa7d599f559 [ 207.978746][ T3295] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa7d5c25fac [ 207.986742][ T3295] RBP: 00007fa7d5c25fa0 R08: 002cf0a143196484 R09: 0000000000000000 [ 207.994732][ T3295] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 208.002727][ T3295] R13: 00007fa7d5c26038 R14: 00007ffc7b11b760 R15: 00007ffc7b11b848 [ 208.010724][ T3295] [ 208.039452][ T3301] loop1: detected capacity change from 0 to 16 [ 208.055274][ T3301] erofs: (device loop1): mounted with root inode @ nid 36. [ 208.071879][ T3301] bio_check_eod: 6 callbacks suppressed [ 208.071897][ T3301] syz.1.888: attempt to access beyond end of device [ 208.071897][ T3301] loop1: rw=524288, sector=1347167560, nr_sectors = 256 limit=16 [ 208.092430][ T3301] syz.1.888: attempt to access beyond end of device [ 208.092430][ T3301] loop1: rw=0, sector=1347167672, nr_sectors = 32 limit=16 [ 208.109795][ T3301] syz.1.888: attempt to access beyond end of device [ 208.109795][ T3301] loop1: rw=0, sector=1347167672, nr_sectors = 32 limit=16 [ 208.124123][ T3301] syz.1.888: attempt to access beyond end of device [ 208.124123][ T3301] loop1: rw=0, sector=1347167672, nr_sectors = 32 limit=16 [ 208.138324][ T3301] syz.1.888: attempt to access beyond end of device [ 208.138324][ T3301] loop1: rw=0, sector=1347167672, nr_sectors = 32 limit=16 [ 208.154102][ T3306] syz.1.888: attempt to access beyond end of device [ 208.154102][ T3306] loop1: rw=0, sector=1347167672, nr_sectors = 32 limit=16 [ 208.167964][ T3306] syz.1.888: attempt to access beyond end of device [ 208.167964][ T3306] loop1: rw=0, sector=1347167672, nr_sectors = 32 limit=16 [ 208.181952][ T19] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 208.189753][ T3305] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 208.189929][ T3306] syz.1.888: attempt to access beyond end of device [ 208.189929][ T3306] loop1: rw=0, sector=1347167672, nr_sectors = 32 limit=16 [ 208.252965][ T3311] loop1: detected capacity change from 0 to 16 [ 208.268745][ T3311] erofs: (device loop1): mounted with root inode @ nid 36. [ 208.295139][ T24] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 208.314527][ T3313] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 208.386084][ T19] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 532, setting to 64 [ 208.397522][ T19] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 208.407476][ T19] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 208.420863][ T3317] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 208.422365][ T3319] loop1: detected capacity change from 0 to 2048 [ 208.431698][ T19] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.450118][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 208.458596][ T19] usb 5-1: SerialNumber: syz [ 208.465732][ T3319] loop1: p1 < > p4 < > [ 208.474274][ T19] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 208.487703][ T24] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 208.502943][ T3084] udevd[3084]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 208.514464][ T24] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 208.526030][ T24] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.527654][ T3084] udevd[3084]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 208.540164][ T24] usb 8-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 208.553649][ T2268] udevd[2268]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 208.557683][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.619661][ T24] usb 8-1: Product: syz [ 208.623975][ T24] usb 8-1: Manufacturer: syz [ 208.628653][ T24] usb 8-1: SerialNumber: syz [ 208.634525][ T3299] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 208.642098][ T3299] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 208.674208][ T1735] usb 5-1: USB disconnect, device number 25 [ 209.117378][ T24] cdc_acm 8-1:1.1: ttyACM0: USB ACM device [ 209.153504][ T24] usb 8-1: USB disconnect, device number 17 [ 210.155511][ T3348] FAULT_INJECTION: forcing a failure. [ 210.155511][ T3348] name failslab, interval 1, probability 0, space 0, times 0 [ 210.268780][ T3348] CPU: 1 PID: 3348 Comm: syz.7.907 Not tainted syzkaller #0 [ 210.276144][ T3348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 210.286233][ T3348] Call Trace: [ 210.289563][ T3348] [ 210.292514][ T3348] __dump_stack+0x21/0x24 [ 210.296869][ T3348] dump_stack_lvl+0x110/0x170 [ 210.301571][ T3348] ? __cfi_dump_stack_lvl+0x8/0x8 [ 210.306622][ T3348] ? avc_has_perm_noaudit+0x30a/0x490 [ 210.312045][ T3348] dump_stack+0x15/0x24 [ 210.316234][ T3348] should_fail_ex+0x3bf/0x510 [ 210.320942][ T3348] __should_failslab+0xac/0xf0 [ 210.325743][ T3348] should_failslab+0x9/0x20 [ 210.330279][ T3348] __kmem_cache_alloc_node+0x3d/0x2d0 [ 210.335686][ T3348] ? alloc_super+0x5d/0x850 [ 210.340228][ T3348] ? alloc_super+0x5d/0x850 [ 210.344783][ T3348] kmalloc_trace+0x29/0xb0 [ 210.349245][ T3348] alloc_super+0x5d/0x850 [ 210.353610][ T3348] sget_fc+0x2d8/0x770 [ 210.357712][ T3348] ? __cfi_set_anon_super_fc+0x10/0x10 [ 210.363209][ T3348] ? __cfi_proc_fill_super+0x10/0x10 [ 210.368524][ T3348] get_tree_nodev+0x2a/0x170 [ 210.373151][ T3348] ? proc_get_tree+0xd/0x20 [ 210.377689][ T3348] proc_get_tree+0x1c/0x20 [ 210.382143][ T3348] vfs_get_tree+0x9a/0x270 [ 210.386584][ T3348] do_new_mount+0x251/0xb40 [ 210.391130][ T3348] ? security_capable+0x99/0xc0 [ 210.396025][ T3348] path_mount+0x640/0xfd0 [ 210.400385][ T3348] __se_sys_mount+0x320/0x390 [ 210.405106][ T3348] ? __this_cpu_preempt_check+0x13/0x20 [ 210.410693][ T3348] ? __x64_sys_mount+0xd0/0xd0 [ 210.415495][ T3348] ? __kasan_check_write+0x14/0x20 [ 210.420641][ T3348] ? fpregs_restore_userregs+0x128/0x260 [ 210.426318][ T3348] __x64_sys_mount+0xbf/0xd0 [ 210.430952][ T3348] x64_sys_call+0x65d/0x9a0 [ 210.435491][ T3348] do_syscall_64+0x4c/0xa0 [ 210.439934][ T3348] ? clear_bhb_loop+0x30/0x80 [ 210.444647][ T3348] ? clear_bhb_loop+0x30/0x80 [ 210.449353][ T3348] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.455277][ T3348] RIP: 0033:0x7f67af59f559 [ 210.459714][ T3348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.479351][ T3348] RSP: 002b:00007f67b044e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 210.487802][ T3348] RAX: ffffffffffffffda RBX: 00007f67af825fa0 RCX: 00007f67af59f559 [ 210.495806][ T3348] RDX: 0000200000000480 RSI: 0000200000000440 RDI: 0000000000000000 [ 210.503809][ T3348] RBP: 00007f67af636b20 R08: 0000000000000000 R09: 0000000000000000 [ 210.511808][ T3348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.519806][ T3348] R13: 00007f67af826038 R14: 00007f67af825fa0 R15: 00007fff662eba78 [ 210.527815][ T3348] [ 210.820551][ T3355] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 210.826591][ T3356] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 210.845534][ T3354] device wg1 entered promiscuous mode [ 210.859397][ T3362] loop7: detected capacity change from 0 to 128 [ 210.893954][ T3362] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 210.902804][ T3362] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.955583][ T3360] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 211.043519][ T3375] loop4: detected capacity change from 0 to 16 [ 211.079138][ T3375] erofs: (device loop4): mounted with root inode @ nid 36. [ 211.108408][ T3375] syz.4.914: attempt to access beyond end of device [ 211.108408][ T3375] loop4: rw=524288, sector=1347167560, nr_sectors = 256 limit=16 [ 211.122993][ T3375] syz.4.914: attempt to access beyond end of device [ 211.122993][ T3375] loop4: rw=0, sector=1347167672, nr_sectors = 32 limit=16 [ 211.165306][ T1531] EXT4-fs (loop7): unmounting filesystem. [ 211.186810][ T3387] loop4: detected capacity change from 0 to 512 [ 211.201877][ T3387] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 211.217049][ T3381] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 211.228214][ T3387] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 211.250956][ T3387] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.345054][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 211.365104][ T28] audit: type=1400 audit(1792823349.418:2337): avc: denied { getopt } for pid=3391 comm="syz.5.923" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 211.395239][ T19] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 211.607098][ T24] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 211.619650][ T24] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 211.631450][ T24] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.646296][ T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 211.656324][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.664545][ T24] usb 2-1: Product: syz [ 211.670689][ T24] usb 2-1: Manufacturer: syz [ 211.676022][ T24] usb 2-1: SerialNumber: syz [ 211.710714][ T3377] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 211.719616][ T3377] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 211.846204][ T19] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 211.857111][ T19] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 211.870164][ T19] usb 7-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 211.879291][ T19] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.888471][ T19] usb 7-1: config 0 descriptor?? [ 211.950164][ T24] cdc_acm 2-1:1.1: ttyACM0: USB ACM device [ 211.959265][ T24] usb 2-1: USB disconnect, device number 20 [ 212.110413][ T286] EXT4-fs (loop4): unmounting filesystem. [ 212.188309][ T3413] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 212.457191][ T19] wacom 0003:056A:037A.0017: unknown main item tag 0x3 [ 212.464449][ T19] wacom 0003:056A:037A.0017: Unknown device_type for 'HID 056a:037a'. Assuming pen. [ 212.475306][ T19] wacom 0003:056A:037A.0017: hidraw0: USB HID vf.ff Device [HID 056a:037a] on usb-dummy_hcd.6-1/input0 [ 212.487271][ T19] input: Wacom One by Wacom S Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:037A.0017/input/input64 [ 212.511603][ T3420] loop1: detected capacity change from 0 to 128 [ 212.544787][ T3420] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 212.555666][ T3420] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.578888][ T1735] usb 7-1: USB disconnect, device number 19 [ 212.599662][ T3421] fido_id[3421]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 212.619123][ T3418] loop4: detected capacity change from 0 to 1024 [ 212.657355][ T3418] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 212.666116][ T3418] ext4 filesystem being mounted at /202/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 212.706942][ T288] EXT4-fs (loop1): unmounting filesystem. [ 212.721514][ T3427] tmpfs: Bad value for 'nr_blocks' [ 212.727268][ T3427] overlayfs: failed to resolve './bus': -2 [ 212.764859][ T3429] loop1: detected capacity change from 0 to 16 [ 212.774460][ T3429] erofs: (device loop1): mounted with root inode @ nid 36. [ 212.863566][ T3433] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 212.884163][ T3436] loop1: detected capacity change from 0 to 512 [ 212.895298][ T3436] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 212.975654][ T288] EXT4-fs (loop1): unmounting filesystem. [ 213.665096][ T1735] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 213.733206][ T286] EXT4-fs (loop4): unmounting filesystem. [ 213.943868][ T3467] loop6: detected capacity change from 0 to 512 [ 213.951141][ T3465] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 213.961617][ T1735] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 213.982116][ T3467] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 213.998365][ T1735] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 214.021462][ T1735] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.043879][ T3467] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 214.053381][ T3467] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.065904][ T1735] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 214.173401][ T1735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.181960][ T1735] usb 2-1: Product: syz [ 214.186512][ T1735] usb 2-1: Manufacturer: syz [ 214.191217][ T1735] usb 2-1: SerialNumber: syz [ 214.202301][ T3454] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 214.209970][ T3454] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 214.435147][ T24] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 214.453577][ T1735] cdc_acm 2-1:1.1: ttyACM0: USB ACM device [ 214.590257][ T1735] usb 2-1: USB disconnect, device number 21 [ 214.675924][ T3482] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 214.708401][ T3486] loop1: detected capacity change from 0 to 256 [ 214.719142][ T3486] exfat: Deprecated parameter 'utf8' [ 214.724603][ T3486] exfat: Deprecated parameter 'utf8' [ 214.732631][ T3486] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 214.960168][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 214.960194][ T1092] EXT4-fs (loop6): unmounting filesystem. [ 214.977705][ T24] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 214.994956][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.003422][ T24] usb 5-1: Product: syz [ 215.016028][ T24] usb 5-1: Manufacturer: syz [ 215.020839][ T24] usb 5-1: SerialNumber: syz [ 215.064975][ T28] audit: type=1400 audit(1792823353.118:2338): avc: denied { sys_module } for pid=3493 comm="syz.6.948" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 215.086330][ T19] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 215.101938][ T3494] loop6: detected capacity change from 0 to 128 [ 215.134963][ T3494] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 215.153231][ T3494] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.216364][ T1092] EXT4-fs (loop6): unmounting filesystem. [ 215.248943][ T24] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 215.258948][ T24] usb 5-1: unit 2 not found! [ 215.263640][ T24] usb 5-1: unit 6 not found! [ 215.282888][ T24] usb 5-1: USB disconnect, device number 26 [ 215.286722][ T19] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 215.309994][ T19] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 215.340067][ T19] usb 8-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 215.358009][ T19] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.378327][ T19] usb 8-1: config 0 descriptor?? [ 215.386296][ T3502] netlink: 68 bytes leftover after parsing attributes in process `syz.6.950'. [ 215.408291][ T3502] exfat: Deprecated parameter 'utf8' [ 215.413692][ T3502] exfat: Deprecated parameter 'utf8' [ 215.424043][ T3502] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 215.535555][ T3084] udevd[3084]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 215.846523][ T3517] overlayfs: failed to clone upperpath [ 215.945297][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 216.156474][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 216.209501][ T24] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 216.255176][ T1735] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 216.289798][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.332350][ T24] usb 2-1: Product: syz [ 216.355535][ T24] usb 2-1: Manufacturer: syz [ 216.380597][ T24] usb 2-1: SerialNumber: syz [ 216.434615][ T24] r8152-cfgselector 2-1: config 0 descriptor?? [ 216.456911][ T1735] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 216.585516][ T1735] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 216.605070][ T1735] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.629266][ T1735] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 216.648737][ T1735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.667076][ T1735] usb 5-1: Product: syz [ 216.675173][ T1735] usb 5-1: Manufacturer: syz [ 216.715102][ T1735] usb 5-1: SerialNumber: syz [ 216.740177][ T3520] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 216.747697][ T3520] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 216.812350][ T19] wacom 0003:056A:037A.0018: unknown main item tag 0x3 [ 216.819956][ T19] wacom 0003:056A:037A.0018: Unknown device_type for 'HID 056a:037a'. Assuming pen. [ 216.835387][ T19] wacom 0003:056A:037A.0018: hidraw0: USB HID vf.ff Device [HID 056a:037a] on usb-dummy_hcd.7-1/input0 [ 216.855949][ T19] input: Wacom One by Wacom S Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:056A:037A.0018/input/input67 [ 216.880016][ T19] usb 8-1: USB disconnect, device number 18 [ 216.910729][ T3536] fido_id[3536]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 216.997341][ T1735] cdc_acm 5-1:1.1: ttyACM0: USB ACM device [ 217.014094][ T1735] usb 5-1: USB disconnect, device number 27 [ 217.230109][ T3546] set_capacity_and_notify: 1 callbacks suppressed [ 217.230132][ T3546] loop4: detected capacity change from 0 to 512 [ 217.247123][ T2132] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 217.257432][ T3546] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 217.307437][ T3546] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 217.324155][ T3546] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.456183][ T2132] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 532, setting to 64 [ 217.467325][ T2132] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 217.477494][ T2132] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 217.495837][ T24] r8152-cfgselector 2-1: Unknown version 0x0000 [ 217.502624][ T24] r8152-cfgselector 2-1: bad CDC descriptors [ 217.512435][ T24] r8152-cfgselector 2-1: Unknown version 0x0000 [ 217.523624][ T2132] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.545068][ T24] r8152-cfgselector 2-1: USB disconnect, device number 22 [ 217.560913][ T2132] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 217.799812][ T2132] usb 7-1: SerialNumber: syz [ 217.919856][ T2132] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 217.933325][ T28] audit: type=1400 audit(1792823355.988:2339): avc: denied { bind } for pid=3567 comm="syz.7.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 218.050555][ T3579] loop7: detected capacity change from 0 to 512 [ 218.082475][ T3579] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 218.245463][ T3582] overlayfs: failed to clone upperpath [ 218.293073][ T286] EXT4-fs (loop4): unmounting filesystem. [ 218.382004][ T2132] usb 7-1: USB disconnect, device number 20 [ 218.427269][ T3579] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 218.469942][ T3579] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.663311][ T28] audit: type=1326 audit(1792823357.718:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3596 comm="syz.5.977" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c839f559 code=0x7ffc0000 [ 219.671757][ T3597] fuse: Bad value for 'fd' [ 219.688285][ T28] audit: type=1326 audit(1792823357.718:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3596 comm="syz.5.977" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c839f559 code=0x7ffc0000 [ 219.721164][ T28] audit: type=1326 audit(1792823357.718:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3596 comm="syz.5.977" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49c839f559 code=0x7ffc0000 [ 219.735836][ T3598] cgroup: Unexpected value for 'clone_children' [ 219.752421][ T3597] cgroup: Unexpected value for 'clone_children' [ 219.759924][ T28] audit: type=1326 audit(1792823357.718:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3596 comm="syz.5.977" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c839f559 code=0x7ffc0000 [ 219.785629][ T28] audit: type=1326 audit(1792823357.718:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3596 comm="syz.5.977" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c839f559 code=0x7ffc0000 [ 219.810450][ T28] audit: type=1326 audit(1792823357.718:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3596 comm="syz.5.977" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f49c839f559 code=0x7ffc0000 [ 219.836565][ T19] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 219.846506][ T28] audit: type=1326 audit(1792823357.718:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3596 comm="syz.5.977" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c839f559 code=0x7ffc0000 [ 219.846818][ T1531] EXT4-fs (loop7): unmounting filesystem. [ 219.873282][ T28] audit: type=1326 audit(1792823357.718:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3596 comm="syz.5.977" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c839f559 code=0x7ffc0000 [ 219.908909][ T28] audit: type=1326 audit(1792823357.718:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3596 comm="syz.5.977" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49c839f559 code=0x7ffc0000 [ 219.955070][ T2132] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 219.967240][ T3608] loop7: detected capacity change from 0 to 256 [ 220.046180][ T19] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 220.065043][ T19] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 220.074970][ T19] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.112174][ T19] usb 5-1: string descriptor 0 read error: -71 [ 220.125083][ T19] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 220.135198][ T2132] usb 2-1: Using ep0 maxpacket: 16 [ 220.143061][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.165689][ T19] usb 5-1: can't set config #1, error -71 [ 220.177624][ T19] usb 5-1: USB disconnect, device number 28 [ 222.670105][ T2132] usb 2-1: device descriptor read/all, error -71 [ 222.936123][ T28] kauditd_printk_skb: 201 callbacks suppressed [ 222.936139][ T28] audit: type=1400 audit(1792823360.998:2550): avc: denied { create } for pid=3695 comm="syz.6.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 222.992712][ T28] audit: type=1400 audit(1792823361.028:2551): avc: denied { create } for pid=3695 comm="syz.6.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 223.030842][ T28] audit: type=1400 audit(1792823361.038:2552): avc: denied { read } for pid=1092 comm="syz-executor" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 223.099381][ T28] audit: type=1400 audit(1792823361.048:2553): avc: denied { execmem } for pid=3698 comm="syz.6.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 223.297621][ T28] audit: type=1400 audit(1792823361.358:2554): avc: denied { read } for pid=1531 comm="syz-executor" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 223.365491][ T28] audit: type=1400 audit(1792823361.398:2555): avc: denied { read write } for pid=3702 comm="syz.7.1017" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 223.423180][ T28] audit: type=1400 audit(1792823361.468:2556): avc: denied { read } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 223.462476][ T28] audit: type=1400 audit(1792823361.468:2557): avc: denied { execmem } for pid=3702 comm="syz.7.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 223.482221][ T28] audit: type=1400 audit(1792823361.478:2558): avc: denied { read } for pid=3702 comm="syz.7.1017" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 223.507050][ T28] audit: type=1400 audit(1792823361.478:2559): avc: denied { read } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 223.622348][ T3721] device vlan2 entered promiscuous mode [ 223.636874][ T3721] device bridge0 entered promiscuous mode [ 224.852416][ T3769] netlink: 'syz.7.1044': attribute type 3 has an invalid length. [ 226.489628][ T3854] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1077'. [ 227.224763][ T3878] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1090'. [ 227.234210][ T3878] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1090'. [ 227.469764][ T3900] FAULT_INJECTION: forcing a failure. [ 227.469764][ T3900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.517870][ T3900] CPU: 1 PID: 3900 Comm: syz.6.1096 Not tainted syzkaller #0 [ 227.525317][ T3900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 227.535407][ T3900] Call Trace: [ 227.538749][ T3900] [ 227.541704][ T3900] __dump_stack+0x21/0x24 [ 227.546072][ T3900] dump_stack_lvl+0x110/0x170 [ 227.550777][ T3900] ? __cfi_dump_stack_lvl+0x8/0x8 [ 227.555831][ T3900] dump_stack+0x15/0x24 [ 227.560036][ T3900] should_fail_ex+0x3bf/0x510 [ 227.564752][ T3900] should_fail+0xb/0x10 [ 227.568932][ T3900] should_fail_usercopy+0x1a/0x20 [ 227.573992][ T3900] _copy_to_user+0x1e/0x90 [ 227.578441][ T3900] simple_read_from_buffer+0xe9/0x160 [ 227.583888][ T3900] proc_fail_nth_read+0x1a6/0x220 [ 227.588954][ T3900] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 227.594541][ T3900] ? security_file_permission+0x94/0xb0 [ 227.600128][ T3900] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 227.605709][ T3900] vfs_read+0x286/0x930 [ 227.609899][ T3900] ? __cfi_vfs_read+0x10/0x10 [ 227.614605][ T3900] ? __kasan_check_write+0x14/0x20 [ 227.619754][ T3900] ? mutex_lock+0x93/0x1b0 [ 227.624208][ T3900] ? __cfi_mutex_lock+0x10/0x10 [ 227.629108][ T3900] ? __fdget_pos+0x2cd/0x380 [ 227.633732][ T3900] ? ksys_read+0x70/0x260 [ 227.638092][ T3900] ksys_read+0x14a/0x260 [ 227.642797][ T3900] ? __cfi_ksys_read+0x10/0x10 [ 227.647587][ T3900] ? debug_smp_processor_id+0x17/0x20 [ 227.653005][ T3900] __x64_sys_read+0x7b/0x90 [ 227.657637][ T3900] x64_sys_call+0x2f/0x9a0 [ 227.662314][ T3900] do_syscall_64+0x4c/0xa0 [ 227.666803][ T3900] ? clear_bhb_loop+0x30/0x80 [ 227.671790][ T3900] ? clear_bhb_loop+0x30/0x80 [ 227.676523][ T3900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.682459][ T3900] RIP: 0033:0x7fa7d595fd8e [ 227.686919][ T3900] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 227.706652][ T3900] RSP: 002b:00007fa7d67defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 227.715124][ T3900] RAX: ffffffffffffffda RBX: 00007fa7d67df6c0 RCX: 00007fa7d595fd8e [ 227.723136][ T3900] RDX: 000000000000000f RSI: 00007fa7d67df0a0 RDI: 0000000000000003 [ 227.731147][ T3900] RBP: 00007fa7d67df090 R08: 0000000000000000 R09: 0000000000000000 [ 227.739158][ T3900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.747342][ T3900] R13: 00007fa7d5c26038 R14: 00007fa7d5c25fa0 R15: 00007ffc7b11b848 [ 227.755353][ T3900] [ 228.125048][ T28] kauditd_printk_skb: 416 callbacks suppressed [ 228.125066][ T28] audit: type=1400 audit(1792823366.178:2976): avc: denied { read } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 228.167734][ T28] audit: type=1400 audit(1792823366.218:2977): avc: denied { read write } for pid=3916 comm="syz.1.1103" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 228.207271][ T28] audit: type=1400 audit(1792823366.258:2978): avc: denied { bpf } for pid=3914 comm="syz.5.1102" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 228.259386][ T28] audit: type=1400 audit(1792823366.258:2979): avc: denied { bpf } for pid=3914 comm="syz.5.1102" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 228.293559][ T28] audit: type=1400 audit(1792823366.258:2980): avc: denied { prog_load } for pid=3914 comm="syz.5.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 228.313933][ T28] audit: type=1400 audit(1792823366.258:2981): avc: denied { bpf } for pid=3914 comm="syz.5.1102" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 228.337626][ T28] audit: type=1400 audit(1792823366.288:2982): avc: denied { create } for pid=3919 comm="syz.5.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 228.358093][ T28] audit: type=1400 audit(1792823366.298:2983): avc: denied { execmem } for pid=3916 comm="syz.1.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 228.377665][ T28] audit: type=1400 audit(1792823366.298:2984): avc: denied { read } for pid=3916 comm="syz.1.1103" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 228.431204][ T28] audit: type=1400 audit(1792823366.348:2985): avc: denied { create } for pid=3922 comm="syz.5.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 228.575763][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 228.584146][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 228.625195][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 228.633432][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 228.655072][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 228.663601][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 228.705044][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 228.713297][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 228.746037][ T3930] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 229.215852][ T3945] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1114'. [ 231.699167][ T4025] cgroup: fork rejected by pids controller in /syz4 [ 232.872759][ T4095] ip_tables: iptables: counters copy to user failed while replacing table [ 233.157869][ T28] kauditd_printk_skb: 535 callbacks suppressed [ 233.157886][ T28] audit: type=1400 audit(1792823371.218:3521): avc: denied { read } for pid=1092 comm="syz-executor" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 233.245031][ T28] audit: type=1400 audit(1792823371.248:3522): avc: denied { create } for pid=4100 comm="syz.6.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 233.295129][ T28] audit: type=1400 audit(1792823371.248:3523): avc: denied { bpf } for pid=4100 comm="syz.6.1153" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 233.333915][ T28] audit: type=1400 audit(1792823371.248:3524): avc: denied { prog_load } for pid=4100 comm="syz.6.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 233.376226][ T28] audit: type=1400 audit(1792823371.268:3525): avc: denied { read } for pid=1092 comm="syz-executor" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 233.422646][ T28] audit: type=1400 audit(1792823371.288:3526): avc: denied { read write } for pid=4102 comm="syz.6.1154" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 233.476840][ T28] audit: type=1400 audit(1792823371.298:3527): avc: denied { read write } for pid=4102 comm="syz.6.1154" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 233.525349][ T28] audit: type=1400 audit(1792823371.298:3528): avc: denied { bpf } for pid=4102 comm="syz.6.1154" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 233.567631][ T28] audit: type=1400 audit(1792823371.298:3529): avc: denied { prog_load } for pid=4102 comm="syz.6.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 233.606254][ T28] audit: type=1400 audit(1792823371.298:3530): avc: denied { mount } for pid=4102 comm="syz.6.1154" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=0 [ 234.068886][ T4121] xt_l2tp: v2 doesn't support IP mode [ 234.217285][ T4146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1172'. [ 234.228405][ T4146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1172'. [ 235.385774][ T4193] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1190'. [ 235.814257][ T4214] ip_tables: iptables: counters copy to user failed while replacing table [ 235.886749][ T4214] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.894111][ T4214] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.991488][ T4226] FAULT_INJECTION: forcing a failure. [ 235.991488][ T4226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.016897][ T4226] CPU: 1 PID: 4226 Comm: syz.1.1201 Not tainted syzkaller #0 [ 236.024344][ T4226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 236.034455][ T4226] Call Trace: [ 236.037799][ T4226] [ 236.040750][ T4226] __dump_stack+0x21/0x24 [ 236.045106][ T4226] dump_stack_lvl+0x110/0x170 [ 236.049801][ T4226] ? __cfi_dump_stack_lvl+0x8/0x8 [ 236.054839][ T4226] dump_stack+0x15/0x24 [ 236.059006][ T4226] should_fail_ex+0x3bf/0x510 [ 236.063741][ T4226] should_fail+0xb/0x10 [ 236.067914][ T4226] should_fail_usercopy+0x1a/0x20 [ 236.072953][ T4226] _copy_to_user+0x1e/0x90 [ 236.077387][ T4226] simple_read_from_buffer+0xe9/0x160 [ 236.082803][ T4226] proc_fail_nth_read+0x1a6/0x220 [ 236.087852][ T4226] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 236.093418][ T4226] ? security_file_permission+0x94/0xb0 [ 236.098987][ T4226] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 236.104554][ T4226] vfs_read+0x286/0x930 [ 236.108731][ T4226] ? __cfi_vfs_read+0x10/0x10 [ 236.113420][ T4226] ? __kasan_check_write+0x14/0x20 [ 236.118543][ T4226] ? mutex_lock+0x93/0x1b0 [ 236.122975][ T4226] ? __cfi_mutex_lock+0x10/0x10 [ 236.127881][ T4226] ? __fdget_pos+0x2cd/0x380 [ 236.132513][ T4226] ? ksys_read+0x70/0x260 [ 236.136872][ T4226] ksys_read+0x14a/0x260 [ 236.141131][ T4226] ? __cfi_ksys_read+0x10/0x10 [ 236.145911][ T4226] ? debug_smp_processor_id+0x17/0x20 [ 236.151308][ T4226] __x64_sys_read+0x7b/0x90 [ 236.155837][ T4226] x64_sys_call+0x2f/0x9a0 [ 236.160309][ T4226] do_syscall_64+0x4c/0xa0 [ 236.164758][ T4226] ? clear_bhb_loop+0x30/0x80 [ 236.169470][ T4226] ? clear_bhb_loop+0x30/0x80 [ 236.174170][ T4226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.180094][ T4226] RIP: 0033:0x7f26e675fd8e [ 236.184541][ T4226] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 236.204180][ T4226] RSP: 002b:00007f26e7674fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 236.212621][ T4226] RAX: ffffffffffffffda RBX: 00007f26e76756c0 RCX: 00007f26e675fd8e [ 236.220608][ T4226] RDX: 000000000000000f RSI: 00007f26e76750a0 RDI: 0000000000000003 [ 236.228609][ T4226] RBP: 00007f26e7675090 R08: 0000000000000000 R09: 0000000000000000 [ 236.236594][ T4226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.244581][ T4226] R13: 00007f26e6a26038 R14: 00007f26e6a25fa0 R15: 00007ffe8cbdfd68 [ 236.252579][ T4226] [ 236.767117][ T4248] FAULT_INJECTION: forcing a failure. [ 236.767117][ T4248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.785071][ T4248] CPU: 0 PID: 4248 Comm: syz.7.1209 Not tainted syzkaller #0 [ 236.792506][ T4248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 236.802586][ T4248] Call Trace: [ 236.805892][ T4248] [ 236.808856][ T4248] __dump_stack+0x21/0x24 [ 236.813244][ T4248] dump_stack_lvl+0x110/0x170 [ 236.817950][ T4248] ? __cfi_dump_stack_lvl+0x8/0x8 [ 236.823004][ T4248] ? format_decode+0x1bb/0x1520 [ 236.827891][ T4248] dump_stack+0x15/0x24 [ 236.832122][ T4248] should_fail_ex+0x3bf/0x510 [ 236.836845][ T4248] should_fail+0xb/0x10 [ 236.841047][ T4248] should_fail_usercopy+0x1a/0x20 [ 236.846103][ T4248] _copy_from_user+0x1e/0xc0 [ 236.850737][ T4248] kstrtouint_from_user+0xda/0x170 [ 236.855895][ T4248] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 236.861659][ T4248] ? __kasan_check_read+0x11/0x20 [ 236.866721][ T4248] ? _copy_to_user+0x72/0x90 [ 236.871348][ T4248] ? simple_read_from_buffer+0x10f/0x160 [ 236.877022][ T4248] proc_fail_nth_write+0x8b/0x200 [ 236.882113][ T4248] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 236.887779][ T4248] ? security_file_permission+0x8a/0xb0 [ 236.893367][ T4248] ? security_file_permission+0x94/0xb0 [ 236.898956][ T4248] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 236.904630][ T4248] vfs_write+0x3fb/0xd00 [ 236.908898][ T4248] ? __kasan_check_read+0x11/0x20 [ 236.913951][ T4248] ? __cfi_vfs_write+0x10/0x10 [ 236.918751][ T4248] ? __kasan_check_write+0x14/0x20 [ 236.923894][ T4248] ? mutex_lock+0x93/0x1b0 [ 236.928346][ T4248] ? __cfi_mutex_lock+0x10/0x10 [ 236.933233][ T4248] ? __fdget_pos+0x2cd/0x380 [ 236.937851][ T4248] ? ksys_write+0x70/0x260 [ 236.942293][ T4248] ksys_write+0x14a/0x260 [ 236.946648][ T4248] ? __cfi_ksys_write+0x10/0x10 [ 236.951526][ T4248] ? debug_smp_processor_id+0x17/0x20 [ 236.956981][ T4248] __x64_sys_write+0x7b/0x90 [ 236.961612][ T4248] x64_sys_call+0x27b/0x9a0 [ 236.966147][ T4248] do_syscall_64+0x4c/0xa0 [ 236.970586][ T4248] ? clear_bhb_loop+0x30/0x80 [ 236.975291][ T4248] ? clear_bhb_loop+0x30/0x80 [ 236.979999][ T4248] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.985929][ T4248] RIP: 0033:0x7f67af55fd8e [ 236.990368][ T4248] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 237.010006][ T4248] RSP: 002b:00007f67b044dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 237.018469][ T4248] RAX: ffffffffffffffda RBX: 00007f67b044e6c0 RCX: 00007f67af55fd8e [ 237.026476][ T4248] RDX: 0000000000000001 RSI: 00007f67b044e0a0 RDI: 0000000000000003 [ 237.034474][ T4248] RBP: 00007f67b044e090 R08: 0000000000000000 R09: 0000000000000000 [ 237.042472][ T4248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.050468][ T4248] R13: 00007f67af826038 R14: 00007f67af825fa0 R15: 00007fff662eba78 [ 237.058471][ T4248] [ 237.385780][ T4253] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1210'. [ 238.180060][ T28] kauditd_printk_skb: 431 callbacks suppressed [ 238.180078][ T28] audit: type=1400 audit(1792823376.238:3962): avc: denied { bpf } for pid=4288 comm="syz.1.1223" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 238.211705][ T28] audit: type=1400 audit(1792823376.268:3963): avc: denied { map_create } for pid=4288 comm="syz.1.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 238.231384][ T28] audit: type=1400 audit(1792823376.268:3964): avc: denied { bpf } for pid=4288 comm="syz.1.1223" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 238.252507][ T28] audit: type=1400 audit(1792823376.268:3965): avc: denied { prog_load } for pid=4288 comm="syz.1.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 238.271995][ T28] audit: type=1400 audit(1792823376.268:3966): avc: denied { bpf } for pid=4288 comm="syz.1.1223" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 238.292999][ T28] audit: type=1400 audit(1792823376.268:3967): avc: denied { prog_load } for pid=4288 comm="syz.1.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 238.312454][ T28] audit: type=1400 audit(1792823376.268:3968): avc: denied { bpf } for pid=4288 comm="syz.1.1223" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 238.335090][ T28] audit: type=1400 audit(1792823376.268:3969): avc: denied { bpf } for pid=4288 comm="syz.1.1223" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 238.356155][ T28] audit: type=1400 audit(1792823376.268:3970): avc: denied { prog_load } for pid=4288 comm="syz.1.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 238.542877][ T28] audit: type=1400 audit(1792823376.598:3971): avc: denied { read } for pid=1531 comm="syz-executor" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 239.384078][ T4314] syz.1.1231 (4314) used greatest stack depth: 18080 bytes left [ 239.567328][ T4336] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1241'. [ 241.053038][ T4379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1255'. [ 241.937457][ T4405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4405 comm=syz.6.1264 [ 242.180759][ T4421] FAULT_INJECTION: forcing a failure. [ 242.180759][ T4421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.217928][ T4421] CPU: 1 PID: 4421 Comm: syz.6.1270 Not tainted syzkaller #0 [ 242.225462][ T4421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 242.235571][ T4421] Call Trace: [ 242.238914][ T4421] [ 242.241871][ T4421] __dump_stack+0x21/0x24 [ 242.246230][ T4421] dump_stack_lvl+0x110/0x170 [ 242.250933][ T4421] ? __cfi_dump_stack_lvl+0x8/0x8 [ 242.255991][ T4421] dump_stack+0x15/0x24 [ 242.260532][ T4421] should_fail_ex+0x3bf/0x510 [ 242.265267][ T4421] should_fail+0xb/0x10 [ 242.269462][ T4421] should_fail_usercopy+0x1a/0x20 [ 242.274537][ T4421] _copy_to_user+0x1e/0x90 [ 242.278989][ T4421] simple_read_from_buffer+0xe9/0x160 [ 242.284408][ T4421] proc_fail_nth_read+0x1a6/0x220 [ 242.289475][ T4421] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 242.295099][ T4421] ? security_file_permission+0x94/0xb0 [ 242.300703][ T4421] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 242.306295][ T4421] vfs_read+0x286/0x930 [ 242.310488][ T4421] ? __cfi_vfs_read+0x10/0x10 [ 242.315230][ T4421] ? __kasan_check_write+0x14/0x20 [ 242.320372][ T4421] ? mutex_lock+0x93/0x1b0 [ 242.324819][ T4421] ? __cfi_mutex_lock+0x10/0x10 [ 242.329732][ T4421] ? __fdget_pos+0x2cd/0x380 [ 242.334349][ T4421] ? ksys_read+0x70/0x260 [ 242.338707][ T4421] ksys_read+0x14a/0x260 [ 242.342978][ T4421] ? __cfi_ksys_read+0x10/0x10 [ 242.347781][ T4421] ? debug_smp_processor_id+0x17/0x20 [ 242.353200][ T4421] __x64_sys_read+0x7b/0x90 [ 242.358171][ T4421] x64_sys_call+0x2f/0x9a0 [ 242.362625][ T4421] do_syscall_64+0x4c/0xa0 [ 242.367102][ T4421] ? clear_bhb_loop+0x30/0x80 [ 242.371813][ T4421] ? clear_bhb_loop+0x30/0x80 [ 242.376618][ T4421] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.382549][ T4421] RIP: 0033:0x7fa7d595fd8e [ 242.386993][ T4421] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 242.406640][ T4421] RSP: 002b:00007fa7d67defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.415116][ T4421] RAX: ffffffffffffffda RBX: 00007fa7d67df6c0 RCX: 00007fa7d595fd8e [ 242.423128][ T4421] RDX: 000000000000000f RSI: 00007fa7d67df0a0 RDI: 0000000000000005 [ 242.431132][ T4421] RBP: 00007fa7d67df090 R08: 0000000000000000 R09: 0000000000000000 [ 242.439138][ T4421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.447150][ T4421] R13: 00007fa7d5c26038 R14: 00007fa7d5c25fa0 R15: 00007ffc7b11b848 [ 242.455187][ T4421] [ 242.775886][ T4432] mmap: syz.7.1274 (4432): VmData 40828928 exceed data ulimit 14. Update limits or use boot option ignore_rlimit_data. [ 243.364375][ T28] kauditd_printk_skb: 216 callbacks suppressed [ 243.364387][ T28] audit: type=1400 audit(1792823381.418:4188): avc: denied { read } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 243.418365][ T28] audit: type=1400 audit(1792823381.468:4189): avc: denied { read } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 243.455301][ T28] audit: type=1400 audit(1792823381.468:4190): avc: denied { create } for pid=4444 comm="syz.1.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 243.476299][ T28] audit: type=1400 audit(1792823381.468:4191): avc: denied { create } for pid=4444 comm="syz.1.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 243.497840][ T28] audit: type=1400 audit(1792823381.478:4192): avc: denied { read } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 243.540105][ T28] audit: type=1400 audit(1792823381.508:4193): avc: denied { read } for pid=1531 comm="syz-executor" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 243.565208][ T28] audit: type=1400 audit(1792823381.508:4194): avc: denied { read write } for pid=4446 comm="syz.1.1280" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 243.590233][ T28] audit: type=1400 audit(1792823381.508:4195): avc: denied { read } for pid=1092 comm="syz-executor" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 243.615231][ T28] audit: type=1400 audit(1792823381.508:4196): avc: denied { read write } for pid=4448 comm="syz.7.1281" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 243.642003][ T28] audit: type=1400 audit(1792823381.508:4197): avc: denied { mounton } for pid=4446 comm="syz.1.1280" path="/251/bus" dev="tmpfs" ino=1425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 244.580532][ T4525] FAULT_INJECTION: forcing a failure. [ 244.580532][ T4525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.593747][ T4525] CPU: 1 PID: 4525 Comm: syz.4.1310 Not tainted syzkaller #0 [ 244.601163][ T4525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 244.611228][ T4525] Call Trace: [ 244.614510][ T4525] [ 244.617467][ T4525] __dump_stack+0x21/0x24 [ 244.621799][ T4525] dump_stack_lvl+0x110/0x170 [ 244.626485][ T4525] ? __cfi_dump_stack_lvl+0x8/0x8 [ 244.631519][ T4525] ? vfs_write+0xa51/0xd00 [ 244.635938][ T4525] dump_stack+0x15/0x24 [ 244.640095][ T4525] should_fail_ex+0x3bf/0x510 [ 244.644778][ T4525] should_fail+0xb/0x10 [ 244.648979][ T4525] should_fail_usercopy+0x1a/0x20 [ 244.654011][ T4525] _copy_from_user+0x1e/0xc0 [ 244.658624][ T4525] __sys_connect+0x16d/0x460 [ 244.663230][ T4525] ? __cfi___sys_connect+0x10/0x10 [ 244.668359][ T4525] ? __kasan_check_write+0x14/0x20 [ 244.673490][ T4525] ? debug_smp_processor_id+0x17/0x20 [ 244.678894][ T4525] __x64_sys_connect+0x7a/0x90 [ 244.683672][ T4525] x64_sys_call+0x88d/0x9a0 [ 244.688189][ T4525] do_syscall_64+0x4c/0xa0 [ 244.692607][ T4525] ? clear_bhb_loop+0x30/0x80 [ 244.697288][ T4525] ? clear_bhb_loop+0x30/0x80 [ 244.701986][ T4525] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 244.707901][ T4525] RIP: 0033:0x7ff8fab9f559 [ 244.712408][ T4525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.732017][ T4525] RSP: 002b:00007ff8fb98b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 244.740441][ T4525] RAX: ffffffffffffffda RBX: 00007ff8fae26090 RCX: 00007ff8fab9f559 [ 244.748505][ T4525] RDX: 000000000000006e RSI: 000020000057eff8 RDI: 0000000000000003 [ 244.756737][ T4525] RBP: 00007ff8fb98b090 R08: 0000000000000000 R09: 0000000000000000 [ 244.764712][ T4525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.772707][ T4525] R13: 00007ff8fae26128 R14: 00007ff8fae26090 R15: 00007ffef16a7be8 [ 244.780701][ T4525] [ 245.715805][ T4551] device syz_tun entered promiscuous mode [ 245.887266][ T4562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1324'. [ 247.048710][ T4600] x_tables: duplicate entry at hook 1 [ 248.375621][ T28] kauditd_printk_skb: 651 callbacks suppressed [ 248.375637][ T28] audit: type=1400 audit(1792823386.438:4849): avc: denied { read } for pid=1531 comm="syz-executor" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 248.409246][ T28] audit: type=1400 audit(1792823386.468:4850): avc: denied { read write } for pid=4651 comm="syz.7.1357" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 248.433729][ T28] audit: type=1400 audit(1792823386.478:4851): avc: denied { read } for pid=1092 comm="syz-executor" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 248.457767][ T28] audit: type=1400 audit(1792823386.498:4852): avc: denied { bpf } for pid=4653 comm="syz.6.1358" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 248.489066][ T28] audit: type=1400 audit(1792823386.498:4853): avc: denied { map_create } for pid=4653 comm="syz.6.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 248.508520][ T28] audit: type=1400 audit(1792823386.508:4854): avc: denied { read write } for pid=4653 comm="syz.6.1358" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 248.532785][ T28] audit: type=1400 audit(1792823386.508:4855): avc: denied { remount } for pid=4651 comm="syz.7.1357" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=0 [ 248.553341][ T28] audit: type=1400 audit(1792823386.538:4856): avc: denied { read } for pid=1531 comm="syz-executor" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 248.577748][ T28] audit: type=1400 audit(1792823386.538:4857): avc: denied { execmem } for pid=4653 comm="syz.6.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 248.597338][ T28] audit: type=1400 audit(1792823386.548:4858): avc: denied { read } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 248.760818][ T1735] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.772537][ T4675] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1366'. [ 248.781777][ T4675] bridge: RTM_NEWNEIGH with invalid ether address [ 250.318824][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 250.423399][ T4735] FAULT_INJECTION: forcing a failure. [ 250.423399][ T4735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.436561][ T4735] CPU: 0 PID: 4735 Comm: syz.7.1387 Not tainted syzkaller #0 [ 250.443972][ T4735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 250.454059][ T4735] Call Trace: [ 250.457385][ T4735] [ 250.460340][ T4735] __dump_stack+0x21/0x24 [ 250.464701][ T4735] dump_stack_lvl+0x110/0x170 [ 250.469405][ T4735] ? __cfi_dump_stack_lvl+0x8/0x8 [ 250.474461][ T4735] dump_stack+0x15/0x24 [ 250.478638][ T4735] should_fail_ex+0x3bf/0x510 [ 250.483353][ T4735] should_fail+0xb/0x10 [ 250.487578][ T4735] should_fail_usercopy+0x1a/0x20 [ 250.492664][ T4735] _copy_to_user+0x1e/0x90 [ 250.497113][ T4735] simple_read_from_buffer+0xe9/0x160 [ 250.502527][ T4735] proc_fail_nth_read+0x1a6/0x220 [ 250.507589][ T4735] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 250.513165][ T4735] ? security_file_permission+0x94/0xb0 [ 250.518757][ T4735] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 250.524337][ T4735] vfs_read+0x286/0x930 [ 250.528523][ T4735] ? __cfi_vfs_read+0x10/0x10 [ 250.533228][ T4735] ? __kasan_check_write+0x14/0x20 [ 250.538372][ T4735] ? mutex_lock+0x93/0x1b0 [ 250.542825][ T4735] ? __cfi_mutex_lock+0x10/0x10 [ 250.547718][ T4735] ? __fdget_pos+0x2cd/0x380 [ 250.552335][ T4735] ? ksys_read+0x70/0x260 [ 250.556692][ T4735] ksys_read+0x14a/0x260 [ 250.560977][ T4735] ? __cfi_ksys_read+0x10/0x10 [ 250.565767][ T4735] ? debug_smp_processor_id+0x17/0x20 [ 250.571175][ T4735] __x64_sys_read+0x7b/0x90 [ 250.575716][ T4735] x64_sys_call+0x2f/0x9a0 [ 250.580165][ T4735] do_syscall_64+0x4c/0xa0 [ 250.584612][ T4735] ? clear_bhb_loop+0x30/0x80 [ 250.589324][ T4735] ? clear_bhb_loop+0x30/0x80 [ 250.594035][ T4735] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.599966][ T4735] RIP: 0033:0x7f67af55fd8e [ 250.604409][ T4735] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 250.624057][ T4735] RSP: 002b:00007f67b044dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 250.632517][ T4735] RAX: ffffffffffffffda RBX: 00007f67b044e6c0 RCX: 00007f67af55fd8e [ 250.640528][ T4735] RDX: 000000000000000f RSI: 00007f67b044e0a0 RDI: 0000000000000004 [ 250.648542][ T4735] RBP: 00007f67b044e090 R08: 0000000000000000 R09: 0000000000000000 [ 250.656553][ T4735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.664555][ T4735] R13: 00007f67af826038 R14: 00007f67af825fa0 R15: 00007fff662eba78 [ 250.672603][ T4735] [ 252.475093][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 252.528196][ T4790] FAULT_INJECTION: forcing a failure. [ 252.528196][ T4790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.541397][ T4790] CPU: 1 PID: 4790 Comm: syz.7.1406 Not tainted syzkaller #0 [ 252.548804][ T4790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 252.558888][ T4790] Call Trace: [ 252.562185][ T4790] [ 252.565126][ T4790] __dump_stack+0x21/0x24 [ 252.569464][ T4790] dump_stack_lvl+0x110/0x170 [ 252.574148][ T4790] ? __cfi_dump_stack_lvl+0x8/0x8 [ 252.579176][ T4790] ? unwind_get_return_address+0x4d/0x90 [ 252.584817][ T4790] dump_stack+0x15/0x24 [ 252.588982][ T4790] should_fail_ex+0x3bf/0x510 [ 252.593688][ T4790] should_fail+0xb/0x10 [ 252.597875][ T4790] should_fail_usercopy+0x1a/0x20 [ 252.603027][ T4790] _copy_from_user+0x1e/0xc0 [ 252.607678][ T4790] do_tcp_getsockopt+0x1f3/0x2270 [ 252.612739][ T4790] ? _parse_integer_limit+0x18e/0x1d0 [ 252.618132][ T4790] ? __cfi_do_tcp_getsockopt+0x10/0x10 [ 252.623618][ T4790] ? memcpy+0x56/0x70 [ 252.627618][ T4790] ? avc_has_perm_noaudit+0x30a/0x490 [ 252.633095][ T4790] ? kstrtouint+0x74/0xe0 [ 252.637452][ T4790] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 252.643195][ T4790] ? avc_has_perm+0x163/0x250 [ 252.647904][ T4790] ? __kasan_check_write+0x14/0x20 [ 252.653054][ T4790] ? __cfi_avc_has_perm+0x10/0x10 [ 252.658117][ T4790] ? selinux_socket_getsockopt+0x22f/0x340 [ 252.663970][ T4790] ? __cfi_selinux_socket_getsockopt+0x10/0x10 [ 252.670149][ T4790] ? __kasan_check_write+0x14/0x20 [ 252.675278][ T4790] ? mutex_unlock+0x8f/0x230 [ 252.679886][ T4790] tcp_getsockopt+0x73/0x130 [ 252.684500][ T4790] sock_common_getsockopt+0xaa/0xc0 [ 252.689722][ T4790] ? __cfi_sock_common_getsockopt+0x10/0x10 [ 252.695643][ T4790] __sys_getsockopt+0x215/0x490 [ 252.700525][ T4790] __x64_sys_getsockopt+0xbf/0xd0 [ 252.705583][ T4790] x64_sys_call+0x3d/0x9a0 [ 252.710051][ T4790] do_syscall_64+0x4c/0xa0 [ 252.714507][ T4790] ? clear_bhb_loop+0x30/0x80 [ 252.719234][ T4790] ? clear_bhb_loop+0x30/0x80 [ 252.723940][ T4790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.729850][ T4790] RIP: 0033:0x7f67af59f559 [ 252.734286][ T4790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.753911][ T4790] RSP: 002b:00007f67b044e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 252.762342][ T4790] RAX: ffffffffffffffda RBX: 00007f67af825fa0 RCX: 00007f67af59f559 [ 252.770334][ T4790] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000004 [ 252.778316][ T4790] RBP: 00007f67b044e090 R08: 0000200000000340 R09: 0000000000000000 [ 252.786326][ T4790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.794345][ T4790] R13: 00007f67af826038 R14: 00007f67af825fa0 R15: 00007fff662eba78 [ 252.802340][ T4790] [ 253.230477][ T4823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1419'. [ 253.392403][ T28] kauditd_printk_skb: 319 callbacks suppressed [ 253.392421][ T28] audit: type=1400 audit(1792823391.448:5178): avc: denied { read } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 253.447650][ T28] audit: type=1400 audit(1792823391.488:5179): avc: denied { bpf } for pid=4824 comm="syz.6.1420" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 253.494612][ T28] audit: type=1400 audit(1792823391.488:5180): avc: denied { map_create } for pid=4824 comm="syz.6.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 253.524713][ T28] audit: type=1400 audit(1792823391.488:5181): avc: denied { execmem } for pid=4828 comm="syz.1.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 253.557109][ T28] audit: type=1400 audit(1792823391.488:5182): avc: denied { create } for pid=4828 comm="syz.1.1421" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 253.598816][ T28] audit: type=1400 audit(1792823391.488:5183): avc: denied { read write } for pid=4828 comm="syz.1.1421" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 253.646731][ T28] audit: type=1400 audit(1792823391.488:5184): avc: denied { bpf } for pid=4828 comm="syz.1.1421" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 253.705021][ T28] audit: type=1400 audit(1792823391.488:5185): avc: denied { bpf } for pid=4824 comm="syz.6.1420" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 253.716290][ T4838] netlink: 'syz.1.1425': attribute type 4 has an invalid length. [ 253.749637][ T28] audit: type=1400 audit(1792823391.488:5186): avc: denied { prog_load } for pid=4824 comm="syz.6.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 253.835009][ T28] audit: type=1400 audit(1792823391.488:5187): avc: denied { bpf } for pid=4828 comm="syz.1.1421" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 253.947010][ T4862] netlink: 'syz.4.1433': attribute type 3 has an invalid length. [ 253.965661][ T4862] netlink: 'syz.4.1433': attribute type 3 has an invalid length. [ 256.755904][ T4954] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1466'. [ 256.765054][ T4954] IPv6: NLM_F_CREATE should be specified when creating new route [ 257.963382][ T5011] FAULT_INJECTION: forcing a failure. [ 257.963382][ T5011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.995060][ T5011] CPU: 1 PID: 5011 Comm: syz.4.1484 Not tainted syzkaller #0 [ 258.002500][ T5011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 258.012591][ T5011] Call Trace: [ 258.015954][ T5011] [ 258.018921][ T5011] __dump_stack+0x21/0x24 [ 258.023293][ T5011] dump_stack_lvl+0x110/0x170 [ 258.028009][ T5011] ? __cfi_dump_stack_lvl+0x8/0x8 [ 258.033071][ T5011] ? mutex_unlock+0x8f/0x230 [ 258.037696][ T5011] dump_stack+0x15/0x24 [ 258.041881][ T5011] should_fail_ex+0x3bf/0x510 [ 258.046598][ T5011] should_fail+0xb/0x10 [ 258.050787][ T5011] should_fail_usercopy+0x1a/0x20 [ 258.055851][ T5011] strncpy_from_user+0x24/0x2c0 [ 258.060775][ T5011] ? kmem_cache_alloc+0x166/0x320 [ 258.065842][ T5011] ? getname_flags+0xba/0x510 [ 258.070559][ T5011] getname_flags+0xf5/0x510 [ 258.075139][ T5011] __x64_sys_mkdirat+0x7c/0xa0 [ 258.079944][ T5011] x64_sys_call+0x73d/0x9a0 [ 258.084491][ T5011] do_syscall_64+0x4c/0xa0 [ 258.088942][ T5011] ? clear_bhb_loop+0x30/0x80 [ 258.093654][ T5011] ? clear_bhb_loop+0x30/0x80 [ 258.098366][ T5011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.104296][ T5011] RIP: 0033:0x7ff8fab9f559 [ 258.108752][ T5011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.128392][ T5011] RSP: 002b:00007ff8fb9ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 258.136846][ T5011] RAX: ffffffffffffffda RBX: 00007ff8fae25fa0 RCX: 00007ff8fab9f559 [ 258.144868][ T5011] RDX: 00000000000001ff RSI: 0000200000000300 RDI: ffffffffffffff9c [ 258.152886][ T5011] RBP: 00007ff8fb9ac090 R08: 0000000000000000 R09: 0000000000000000 [ 258.160900][ T5011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.168915][ T5011] R13: 00007ff8fae26038 R14: 00007ff8fae25fa0 R15: 00007ffef16a7be8 [ 258.176934][ T5011] [ 258.395971][ T28] kauditd_printk_skb: 415 callbacks suppressed [ 258.395988][ T28] audit: type=1400 audit(1792823396.458:5603): avc: denied { bpf } for pid=5026 comm="syz.5.1487" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 258.457689][ T28] audit: type=1400 audit(1792823396.458:5604): avc: denied { map_create } for pid=5026 comm="syz.5.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 258.507169][ T28] audit: type=1400 audit(1792823396.468:5605): avc: denied { read } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 258.574187][ T28] audit: type=1400 audit(1792823396.498:5606): avc: denied { execmem } for pid=5026 comm="syz.5.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 258.624020][ T28] audit: type=1400 audit(1792823396.598:5607): avc: denied { bpf } for pid=5026 comm="syz.5.1487" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 258.636745][ T4991] cgroup: fork rejected by pids controller in /syz6 [ 258.677422][ T28] audit: type=1400 audit(1792823396.598:5608): avc: denied { map_create } for pid=5026 comm="syz.5.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 258.728988][ T28] audit: type=1400 audit(1792823396.598:5609): avc: denied { bpf } for pid=5026 comm="syz.5.1487" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 258.805037][ T28] audit: type=1400 audit(1792823396.598:5610): avc: denied { prog_load } for pid=5026 comm="syz.5.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 258.871039][ T28] audit: type=1400 audit(1792823396.598:5611): avc: denied { bpf } for pid=5026 comm="syz.5.1487" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 258.924222][ T28] audit: type=1400 audit(1792823396.598:5612): avc: denied { prog_load } for pid=5026 comm="syz.5.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 259.752013][ T5077] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1504'. [ 259.771128][ T5077] IPv6: NLM_F_CREATE should be specified when creating new route [ 259.915216][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 260.514804][ T5127] device syzkaller0 entered promiscuous mode [ 261.675904][ T5182] syz.5.1546 uses obsolete (PF_INET,SOCK_PACKET) [ 263.568199][ T28] kauditd_printk_skb: 482 callbacks suppressed [ 263.568216][ T28] audit: type=1400 audit(263.552:6095): avc: denied { read } for pid=1531 comm="syz-executor" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 263.608349][ T28] audit: type=1400 audit(263.592:6096): avc: denied { create } for pid=5235 comm="syz.7.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 263.628511][ T28] audit: type=1400 audit(263.592:6097): avc: denied { create } for pid=5235 comm="syz.7.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 263.647706][ T28] audit: type=1400 audit(263.592:6098): avc: denied { create } for pid=5235 comm="syz.7.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 263.674679][ T28] audit: type=1400 audit(263.592:6099): avc: denied { create } for pid=5235 comm="syz.7.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 263.694644][ T28] audit: type=1400 audit(263.592:6100): avc: denied { create } for pid=5235 comm="syz.7.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 263.714781][ T28] audit: type=1400 audit(263.592:6101): avc: denied { create } for pid=5235 comm="syz.7.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 263.734884][ T28] audit: type=1400 audit(263.592:6102): avc: denied { execmem } for pid=5235 comm="syz.7.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 263.753634][ T28] audit: type=1400 audit(263.662:6103): avc: denied { read write } for pid=5235 comm="syz.7.1566" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 263.777196][ T28] audit: type=1400 audit(263.682:6104): avc: denied { create } for pid=5235 comm="syz.7.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 264.066352][ T5247] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1571'. [ 264.079510][ T5247] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1571'. [ 267.537246][ T5365] device vlan0 entered promiscuous mode [ 267.615861][ T5367] ip_tables: iptables: counters copy to user failed while replacing table [ 268.580109][ T28] kauditd_printk_skb: 351 callbacks suppressed [ 268.580126][ T28] audit: type=1400 audit(268.562:6456): avc: denied { create } for pid=5407 comm="syz.6.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 268.617868][ T28] audit: type=1400 audit(268.592:6457): avc: denied { read } for pid=1092 comm="syz-executor" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 268.641744][ T28] audit: type=1400 audit(268.592:6458): avc: denied { bpf } for pid=5409 comm="syz.6.1627" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 268.661967][ T28] audit: type=1400 audit(268.592:6459): avc: denied { map_create } for pid=5409 comm="syz.6.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 268.680855][ T28] audit: type=1400 audit(268.592:6460): avc: denied { bpf } for pid=5409 comm="syz.6.1627" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 268.701210][ T28] audit: type=1400 audit(268.592:6461): avc: denied { prog_load } for pid=5409 comm="syz.6.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 268.723489][ T28] audit: type=1400 audit(268.592:6462): avc: denied { bpf } for pid=5409 comm="syz.6.1627" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 268.745027][ T28] audit: type=1400 audit(268.602:6463): avc: denied { read write } for pid=5409 comm="syz.6.1627" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 268.770357][ T28] audit: type=1400 audit(268.602:6464): avc: denied { read write } for pid=5409 comm="syz.6.1627" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 268.794405][ T28] audit: type=1400 audit(268.602:6465): avc: denied { read write } for pid=5409 comm="syz.6.1627" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 269.446345][ T5440] netlink: 'syz.1.1640': attribute type 2 has an invalid length. [ 269.783992][ T5454] FAULT_INJECTION: forcing a failure. [ 269.783992][ T5454] name failslab, interval 1, probability 0, space 0, times 0 [ 269.811898][ T5454] CPU: 1 PID: 5454 Comm: syz.6.1643 Not tainted syzkaller #0 [ 269.819342][ T5454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 269.829415][ T5454] Call Trace: [ 269.832709][ T5454] [ 269.835657][ T5454] __dump_stack+0x21/0x24 [ 269.840121][ T5454] dump_stack_lvl+0x110/0x170 [ 269.844808][ T5454] ? __cfi_dump_stack_lvl+0x8/0x8 [ 269.849845][ T5454] ? number+0xc99/0xef0 [ 269.854030][ T5454] dump_stack+0x15/0x24 [ 269.858199][ T5454] should_fail_ex+0x3bf/0x510 [ 269.862902][ T5454] __should_failslab+0xac/0xf0 [ 269.867691][ T5454] should_failslab+0x9/0x20 [ 269.872214][ T5454] __kmem_cache_alloc_node+0x3d/0x2d0 [ 269.877606][ T5454] ? sidtab_sid2str_get+0x137/0x2c0 [ 269.882829][ T5454] ? vsnprintf+0x189d/0x1990 [ 269.887434][ T5454] ? sidtab_sid2str_get+0x137/0x2c0 [ 269.892660][ T5454] __kmalloc_node_track_caller+0xa1/0x1e0 [ 269.898399][ T5454] ? skb_put+0x10a/0x1f0 [ 269.902670][ T5454] kmemdup+0x2b/0x60 [ 269.906578][ T5454] sidtab_sid2str_get+0x137/0x2c0 [ 269.911628][ T5454] security_sid_to_context_core+0x2ac/0x480 [ 269.917542][ T5454] security_sid_to_context+0x33/0x40 [ 269.922851][ T5454] avc_audit_post_callback+0x135/0x830 [ 269.928328][ T5454] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 269.934326][ T5454] ? __cfi_audit_log_format+0x10/0x10 [ 269.939752][ T5454] ? audit_log_untrustedstring+0xe6/0x100 [ 269.945494][ T5454] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 269.951514][ T5454] common_lsm_audit+0x133f/0x1730 [ 269.956555][ T5454] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 269.962576][ T5454] ? __cfi_common_lsm_audit+0x10/0x10 [ 269.967961][ T5454] ? __stack_depot_save+0x36/0x490 [ 269.973100][ T5454] ? _parse_integer_limit+0x18e/0x1d0 [ 269.978492][ T5454] slow_avc_audit+0x1c4/0x240 [ 269.983191][ T5454] ? __cfi_slow_avc_audit+0x10/0x10 [ 269.988402][ T5454] ? avc_has_perm_noaudit+0x30a/0x490 [ 269.993796][ T5454] selinux_capable+0x244/0x3b0 [ 269.998584][ T5454] ? __cfi_selinux_capable+0x10/0x10 [ 270.003896][ T5454] ? proc_fail_nth_write+0x180/0x200 [ 270.009198][ T5454] ? security_file_permission+0x8a/0xb0 [ 270.014774][ T5454] ? cap_capable+0x1a6/0x230 [ 270.019377][ T5454] security_capable+0x89/0xc0 [ 270.024070][ T5454] capable+0x6d/0xe0 [ 270.028011][ T5454] __sys_bpf+0xdc/0x850 [ 270.032196][ T5454] ? bpf_link_show_fdinfo+0x330/0x330 [ 270.037586][ T5454] ? __cfi_ksys_write+0x10/0x10 [ 270.042451][ T5454] ? debug_smp_processor_id+0x17/0x20 [ 270.047847][ T5454] __x64_sys_bpf+0x7c/0x90 [ 270.052279][ T5454] x64_sys_call+0x488/0x9a0 [ 270.056804][ T5454] do_syscall_64+0x4c/0xa0 [ 270.061235][ T5454] ? clear_bhb_loop+0x30/0x80 [ 270.065928][ T5454] ? clear_bhb_loop+0x30/0x80 [ 270.070621][ T5454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.076531][ T5454] RIP: 0033:0x7fa7d599f559 [ 270.080962][ T5454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.100588][ T5454] RSP: 002b:00007fa7d679d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 270.109024][ T5454] RAX: ffffffffffffffda RBX: 00007fa7d5c26180 RCX: 00007fa7d599f559 [ 270.117020][ T5454] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 0000000000000000 [ 270.125007][ T5454] RBP: 00007fa7d679d090 R08: 0000000000000000 R09: 0000000000000000 [ 270.132999][ T5454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.140980][ T5454] R13: 00007fa7d5c26218 R14: 00007fa7d5c26180 R15: 00007ffc7b11b848 [ 270.148975][ T5454] [ 270.234193][ T5463] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1649'. [ 270.256999][ T5463] device syzkaller0 entered promiscuous mode [ 272.650464][ T5537] cgroup: fork rejected by pids controller in /syz7 [ 273.921852][ T28] kauditd_printk_skb: 476 callbacks suppressed [ 273.921868][ T28] audit: type=1400 audit(273.902:6942): avc: denied { read } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 273.977198][ T28] audit: type=1400 audit(273.932:6943): avc: denied { mounton } for pid=5642 comm="syz.5.1687" path="/344/file0" dev="tmpfs" ino=1914 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 274.022761][ T28] audit: type=1400 audit(273.942:6944): avc: denied { name_bind } for pid=5644 comm="syz.1.1688" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 274.068346][ T28] audit: type=1400 audit(273.982:6945): avc: denied { create } for pid=5646 comm="syz.5.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 274.111033][ T28] audit: type=1400 audit(273.982:6946): avc: denied { create } for pid=5646 comm="syz.5.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 274.151077][ T28] audit: type=1400 audit(273.995:6947): avc: denied { create } for pid=5646 comm="syz.5.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 274.190280][ T28] audit: type=1400 audit(273.995:6948): avc: denied { create } for pid=5646 comm="syz.5.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 274.211367][ T28] audit: type=1400 audit(274.005:6949): avc: denied { name_bind } for pid=5644 comm="syz.1.1688" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 274.233065][ T28] audit: type=1400 audit(274.005:6950): avc: denied { bpf } for pid=5644 comm="syz.1.1688" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 274.256760][ T28] audit: type=1400 audit(274.005:6951): avc: denied { prog_load } for pid=5644 comm="syz.1.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 274.506720][ T5684] ip_tables: iptables: counters copy to user failed while replacing table [ 274.635074][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 275.129386][ T5707] FAULT_INJECTION: forcing a failure. [ 275.129386][ T5707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.158781][ T5707] CPU: 0 PID: 5707 Comm: syz.1.1712 Not tainted syzkaller #0 [ 275.166215][ T5707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 275.176293][ T5707] Call Trace: [ 275.179593][ T5707] [ 275.182550][ T5707] __dump_stack+0x21/0x24 [ 275.186911][ T5707] dump_stack_lvl+0x110/0x170 [ 275.191642][ T5707] ? __cfi_dump_stack_lvl+0x8/0x8 [ 275.196703][ T5707] dump_stack+0x15/0x24 [ 275.200879][ T5707] should_fail_ex+0x3bf/0x510 [ 275.205585][ T5707] should_fail+0xb/0x10 [ 275.209772][ T5707] should_fail_usercopy+0x1a/0x20 [ 275.214821][ T5707] _copy_from_user+0x1e/0xc0 [ 275.219436][ T5707] iovec_from_user+0x1aa/0x2e0 [ 275.224238][ T5707] __import_iovec+0x6d/0x460 [ 275.228844][ T5707] ? kstrtoull+0x137/0x1d0 [ 275.233275][ T5707] import_iovec+0x7c/0xb0 [ 275.237616][ T5707] ___sys_sendmsg+0x252/0x360 [ 275.242306][ T5707] ? __sys_sendmsg+0x290/0x290 [ 275.247105][ T5707] ? __kasan_check_write+0x14/0x20 [ 275.252227][ T5707] ? proc_fail_nth_write+0x180/0x200 [ 275.257534][ T5707] ? vfs_write+0xa51/0xd00 [ 275.261981][ T5707] ? __fdget+0x19c/0x220 [ 275.266237][ T5707] __x64_sys_sendmsg+0x20d/0x2e0 [ 275.271186][ T5707] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 275.276660][ T5707] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 275.282746][ T5707] x64_sys_call+0x171/0x9a0 [ 275.287275][ T5707] do_syscall_64+0x4c/0xa0 [ 275.291715][ T5707] ? clear_bhb_loop+0x30/0x80 [ 275.296422][ T5707] ? clear_bhb_loop+0x30/0x80 [ 275.301133][ T5707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.307050][ T5707] RIP: 0033:0x7f26e679f559 [ 275.311475][ T5707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.331095][ T5707] RSP: 002b:00007f26e7675028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.339529][ T5707] RAX: ffffffffffffffda RBX: 00007f26e6a25fa0 RCX: 00007f26e679f559 [ 275.347518][ T5707] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 275.355499][ T5707] RBP: 00007f26e7675090 R08: 0000000000000000 R09: 0000000000000000 [ 275.363499][ T5707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.371481][ T5707] R13: 00007f26e6a26038 R14: 00007f26e6a25fa0 R15: 00007ffe8cbdfd68 [ 275.379478][ T5707] [ 276.278302][ T5746] ip_tables: iptables: counters copy to user failed while replacing table [ 276.491839][ T5765] FAULT_INJECTION: forcing a failure. [ 276.491839][ T5765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.505334][ T5765] CPU: 1 PID: 5765 Comm: syz.4.1735 Not tainted syzkaller #0 [ 276.512753][ T5765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 276.522838][ T5765] Call Trace: [ 276.526149][ T5765] [ 276.529105][ T5765] __dump_stack+0x21/0x24 [ 276.533463][ T5765] dump_stack_lvl+0x110/0x170 [ 276.538172][ T5765] ? __cfi_dump_stack_lvl+0x8/0x8 [ 276.543223][ T5765] dump_stack+0x15/0x24 [ 276.547446][ T5765] should_fail_ex+0x3bf/0x510 [ 276.552153][ T5765] should_fail+0xb/0x10 [ 276.556338][ T5765] should_fail_usercopy+0x1a/0x20 [ 276.561390][ T5765] _copy_to_user+0x1e/0x90 [ 276.565865][ T5765] simple_read_from_buffer+0xe9/0x160 [ 276.571298][ T5765] proc_fail_nth_read+0x1a6/0x220 [ 276.576354][ T5765] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 276.581945][ T5765] ? security_file_permission+0x94/0xb0 [ 276.587568][ T5765] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 276.593147][ T5765] vfs_read+0x286/0x930 [ 276.597327][ T5765] ? __cfi_vfs_read+0x10/0x10 [ 276.602040][ T5765] ? __kasan_check_write+0x14/0x20 [ 276.607194][ T5765] ? mutex_lock+0x93/0x1b0 [ 276.611638][ T5765] ? __cfi_mutex_lock+0x10/0x10 [ 276.616519][ T5765] ? __fdget_pos+0x2cd/0x380 [ 276.621135][ T5765] ? ksys_read+0x70/0x260 [ 276.625515][ T5765] ksys_read+0x14a/0x260 [ 276.629783][ T5765] ? __cfi_ksys_read+0x10/0x10 [ 276.634577][ T5765] ? debug_smp_processor_id+0x17/0x20 [ 276.640020][ T5765] __x64_sys_read+0x7b/0x90 [ 276.644564][ T5765] x64_sys_call+0x2f/0x9a0 [ 276.649020][ T5765] do_syscall_64+0x4c/0xa0 [ 276.653464][ T5765] ? clear_bhb_loop+0x30/0x80 [ 276.658170][ T5765] ? clear_bhb_loop+0x30/0x80 [ 276.662879][ T5765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 276.668799][ T5765] RIP: 0033:0x7ff8fab5fd8e [ 276.673278][ T5765] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 276.692909][ T5765] RSP: 002b:00007ff8fb9abfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 276.701360][ T5765] RAX: ffffffffffffffda RBX: 00007ff8fb9ac6c0 RCX: 00007ff8fab5fd8e [ 276.709363][ T5765] RDX: 000000000000000f RSI: 00007ff8fb9ac0a0 RDI: 0000000000000003 [ 276.717360][ T5765] RBP: 00007ff8fb9ac090 R08: 0000000000000000 R09: 0000000000000000 [ 276.725359][ T5765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.733359][ T5765] R13: 00007ff8fae26038 R14: 00007ff8fae25fa0 R15: 00007ffef16a7be8 [ 276.741375][ T5765] [ 277.025466][ T5794] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 277.039559][ T5794] device syz_tun entered promiscuous mode [ 277.046647][ T5794] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 277.062790][ T5794] device vlan0 left promiscuous mode [ 277.068418][ T5794] device veth1_macvtap left promiscuous mode [ 277.075437][ T5794] device veth1_macvtap entered promiscuous mode [ 277.083284][ T4217] IPv6: BUG: Address fc00:: on device lo is missing its host route. [ 277.099728][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.107373][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.114840][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.123173][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.130223][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.137859][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.146418][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.154800][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.161900][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.169589][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 277.178262][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 277.186462][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 277.194613][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 277.202946][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.211446][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.219781][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.228116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.236182][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.244349][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.252718][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.261122][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 277.269403][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.277724][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.285750][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.294111][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.302289][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.310358][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.318814][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 277.327121][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.335213][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 277.343062][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.350609][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.358086][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.366326][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.374427][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 277.382206][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.391529][ T1735] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 277.399528][ T1735] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 281.115108][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 281.195166][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!